Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Logfile Auswertung; Rechner startet unmittelbar neu (https://www.trojaner-board.de/206187-logfile-auswertung-rechner-startet-unmittelbar-neu.html)

kornahn 19.02.2023 15:15
Logfile Auswertung; Rechner startet unmittelbar neu
 
Hallo zusammen,

seit einiger Zeit startet mein Rechner sich nach dem Start (häufig innerhalb der ersten 5 Minuten neu.) Zunächst friert das Bild ein, Ton von Videos läuft oft noch weiter, bis dann der Rechner wirklich neu startet. Nachdem sich dieses Verhalten gehäuft hat , habe ich den Rechner bei dem Händler meines Vertrauens abgegeben, der einen von mir vermuteten Hardwaredefekt ausschloss, allerdings durch die Verwendung verschiedener Virenprogramme verschiedene Malware gefunden und entfernt hatte. Das Problem war dann einige Monate behoben. Von Antivir bin ich damals auf G DATA gewechselt.

Nun taucht das Problem erneut auf. Auch G DATA und ein F SECURE Scan haben keine Viren entdecken können. Wieder startet mein Rechner aber nach dem Einschalten neu, manchmal auch mehrere Male.

Ich würde mich über eine Überprüfung des mit FRST erstellten Logfiles freuen!

Herzlichen Dank im Voraus. Rückfragen beantworte ich natürlich gerne.

P.s.: Ich bin mir hinsichtlich der Sensibilität der Logfiles nicht 100%ig bewusst und kenne auch FRST nicht richtig, habe aber in jedem Fall im Logfile Dateinamen (Rubrik 1 Monat) gefunden, die meine Adresse und weitere persönliche Daten nannten. Diese habe ich durch "XXXXX" ersetzt. Dadurch wurde der Logfile in dieser Rubrik in wenigen Einträgen durch mich notgedrungen geändert. Sorry, aber ich komme noch aus einer Zeit, in der es noch Hijackthis gab und bin auf dem Stand hängen geblieben.

FRST.txt

Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 16-02-2023
durchgeführt von kornahn (Administrator) auf KORNAHN (19-02-2023 14:50:01)
Gestartet von C:\Users\korna\Desktop
Geladene Profile: kornahn
Plattform: Microsoft Windows 10 Pro Version 22H2 19045.2604 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Agilebits -> 1Password) C:\Users\korna\AppData\Local\1Password\app\8\1Password.exe <4>
(C:\Program Files (x86)\G DATA\AntiVirus\AVK\AVKWCtlx64.exe ->) (G DATA CyberDefense AG -> G Data CyberDefense AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\DnsCloudClientHost64.exe
(C:\Program Files (x86)\G DATA\AntiVirus\AVK\AVKWCtlx64.exe ->) (G DATA CyberDefense AG -> G DATA CyberDefense AG) C:\Program Files (x86)\G DATA\AntiVirus\AVKTray\AVKTray.exe
(C:\Program Files (x86)\G DATA\AntiVirus\AVKTray\AVKTray.exe ->) (G DATA Software AG -> G DATA CyberDefense AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe
(C:\Program Files\Logitech\Collaboration\Services\Video\RightSightAPI\RightSightService.exe ->) (Logitech Inc -> ) C:\Program Files\Logitech\Collaboration\Services\Video\RightSightAPI\crashpad_handler.exe
(C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe ->) (Logitech Inc -> Logitech Europe S.A.) C:\Program Files\Logitech\Collaboration\Services\Video\RightSightAPI\RightSightService.exe
(C:\Program Files\Logitech\X56\X56_Profiler.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\X56\LAClient\laclient.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe <2>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(D:\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <8>
(DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxEM.exe
(explorer.exe ->) (Jotta AS -> ) C:\Program Files\Jotta\jotta.exe
(explorer.exe ->) (Logitech) [Datei ist nicht signiert] C:\Program Files\Logitech\X56\X56_Profiler.exe
(explorer.exe ->) (Mozilla Corporation -> Mozilla Corporation) E:\Thunderbird\thunderbird.exe <5>
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(explorer.exe ->) (Valve Corp. -> Valve Corporation) D:\Steam\steam.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Kilonova LLC -> Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.5.0.7\Lightshot.exe
(Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\Receiver\UpdaterService.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (Electronic Arts, Inc. -> Electronic Arts) D:\Sims4\Origin\OriginWebHelperService.exe
(services.exe ->) (Flexera Software LLC -> Flexera Software LLC) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
(services.exe ->) (FOXIT SOFTWARE INC. -> Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe
(services.exe ->) (G DATA CyberDefense AG -> G DATA CyberDefense AG) C:\Program Files (x86)\G DATA\AntiVirus\AVK\AVKWCtlx64.exe
(services.exe ->) (G DATA CyberDefense AG -> G DATA Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(services.exe ->) (G DATA CyberDefense AG -> G DATA Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_c2ac023763d5d3ad\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Jotta AS -> ) C:\Program Files\Jotta\vss\jVSS.exe
(services.exe ->) (Logitech Inc -> Logitech) C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe
(services.exe ->) (Logitech Inc -> Logitech) C:\Program Files\Logitech\DirectOutput\DirectOutputService.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_updater.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe <2>
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_8.71.12001.0_x64__8wekyb3d8bbwe\gamingservices.exe
(services.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_8.71.12001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_36f8a434e9b7b9f2\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(services.exe ->) (SplitmediaLabs Limited -> SplitmediaLabs Limited) C:\Program Files\XSplit\VCam\service\XSpltVidSvc.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2210.0.0_x64__8wekyb3d8bbwe\CalculatorApp.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22122.94.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Speech_OneCore\common\SpeechRuntime.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16404224 2015-09-17] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320568 2016-09-20] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [X56] => C:\Program Files\Logitech\X56\X56_Profiler.exe [87552 2018-09-04] (Logitech) [Datei ist nicht signiert]
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226728 2019-07-21] (Kilonova LLC -> )
HKLM-x32\...\Run: [G Data ASM] => C:\Program Files (x86)\G DATA\AntiVirus\DelayLoader\AutorunDelayLoader.exe [831056 2022-11-27] (G DATA CyberDefense AG -> G DATA CyberDefense AG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [711288 2023-01-09] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Beschränkung <==== ACHTUNG
HKU\S-1-5-21-863764739-3742311988-2442474525-1001\...\Run: [Jotta] => C:\Program Files\Jotta\jotta.exe [13140928 2022-03-30] (Jotta AS -> )
HKLM\...\Print\Monitors\EPSON WF-3520 Series 64MonitorBE: C:\Windows\system32\E_YLMJJE.DLL [120320 2015-01-19] (SEIKO EPSON CORPORATION) [Datei ist nicht signiert]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\110.0.5481.96\Installer\chrmstp.exe [2023-02-14] (Google LLC -> Google LLC)
GroupPolicy-Firefox: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {034741A5-38D2-4111-A07B-3445E2C38683} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)
Task: {0571A6A1-8B15-4F78-802A-43A1527A72AC} - System32\Tasks\Avira_Security_Update => C:\WINDOWS\system32\net.exe [59904 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {0BB7687F-9081-49E4-8CD0-A7A75F550F07} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26334160 2023-02-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {11A884CF-2D21-4FD1-A05F-7C2538FF95CC} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2645880 2023-02-01] (Overwolf Ltd -> Overwolf LTD)
Task: {1489AB8A-BA11-4E02-843B-ACDD1A55ACC6} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {183930C2-11BD-4B61-82EE-E40682AF2EE3} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG
Task: {1DF9F1CD-2737-4E13-92E7-35F79127F5EA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2020-05-29] (Google Inc -> Google LLC)
Task: {233BDE49-4B93-45F3-96CD-AA89C9536CBB} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [716192 2023-02-15] (Mozilla Corporation -> Mozilla Foundation)
Task: {284BF920-03F4-4DE9-81BB-77BF2972775B} - System32\Tasks\update-S-1-5-21-863764739-3742311988-2442474525-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)
Task: {343602D2-D723-4C3A-B823-9F50EC4DC5C5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1552376 2022-09-26] (Adobe Inc. -> Adobe Inc.)
Task: {3EE9DA9C-62D7-45D7-AEE4-12C19D667436} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649784 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {50793C6B-033B-4487-A630-0F4903178840} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5106931F-7490-4D9E-B31B-9C47D17ED01D} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144280 2023-02-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {5BED6862-9B3D-405E-A530-4EB909C4CAE3} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [674720 2023-02-15] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {5C370247-2091-4BC4-ACBE-1FEB66C25A6B} - System32\Tasks\Core Temp Autostart kornahn => C:\Users\korna\Downloads\CoreTemp\Core Temp.exe (Keine Datei)
Task: {5F865F76-493D-4E10-8B41-C46CA39F9513} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [168920 2023-02-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {6F072C9B-AA2E-40FC-86D4-E6A424456CC8} - System32\Tasks\Microsoft\Windows\WaaSMedic\MaintenanceWork => {72566E27-1ABB-4EB3-B4F0-EB431CB1CB32}
Task: {6F19F2B0-928E-4F3C-B5FB-97D59EE528ED} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2020-05-29] (Google Inc -> Google LLC)
Task: {70B1BD5D-6755-4467-993E-6C2A72874F15} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1003128 2022-03-15] (Nvidia Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {858CDC55-9C25-4649-8017-D83F3A4E5DFE} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {8A2F9F01-3267-4AD8-89F6-9045F5C36CBB} - System32\Tasks\Avira_Security_Maintenance => Command(1): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> FallbackTelemetry
Task: {8A2F9F01-3267-4AD8-89F6-9045F5C36CBB} - System32\Tasks\Avira_Security_Maintenance => Command(2): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> ServiceWatchdog
Task: {8A2F9F01-3267-4AD8-89F6-9045F5C36CBB} - System32\Tasks\Avira_Security_Maintenance => Command(3): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> CrashCollector
Task: {9BA9105D-BF4D-4ABE-BC69-1B9773EA8A60} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A29F54BB-39C6-4AB0-A6BB-460600D4B1FD} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {A8780F29-AFC8-4644-AB62-0AB3835DCCDB} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B5F22927-E751-4754-A011-532DC497A2CB} - System32\Tasks\Avira_Security_Systray => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Systray.Application.exe (Keine Datei)
Task: {C86A01BE-A971-4870-859C-EBCE866FD388} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26334160 2023-02-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {DA348224-3397-4F34-9F2D-20EE1E4EADBD} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E0532629-B0F5-4347-AFBF-5A200064F683} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E5CF1D82-8E1A-4D8C-8EA2-708CFB777791} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3342376 2023-01-27] (Nvidia Corporation -> NVIDIA Corporation)
Task: {EF8E9A53-3307-4971-A81C-3394EE330BEA} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144280 2023-02-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {EFE54D16-B076-45D0-9EF4-4DE4DF057EB6} - System32\Tasks\Avira_Security_Service_SCM_Watchdog => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe HandleServiceControlManagerEvent 7000 (Keine Datei)
Task: {FA729D01-7FEC-47BA-8B59-C45423EF38FE} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\IntelPTTEKRecertification.exe [818008 2021-09-15] (Intel Corporation -> Intel(R) Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\Intel PTT EK Recertification.job => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\IntelPTTEKRecertification.exe
Task: C:\WINDOWS\Tasks\update-S-1-5-21-863764739-3742311988-2442474525-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3: <==== ACHTUNG (Beschränkung - Zones)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{04ab56e4-5ccd-449e-8d51-5ee065c7a6cb}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{df5e4596-3f57-4ba8-97d9-6e90b4458643}: [DhcpNameServer] 192.168.178.1

Edge:
=======
DownloadDir: C:\Users\korna\Downloads
Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]
Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]
Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]
Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]
Edge Profile: C:\Users\korna\AppData\Local\Microsoft\Edge\User Data\Default [2022-11-30]
Edge DownloadDir: Default -> C:\Users\korna\Downloads

FireFox:
========
FF DefaultProfile: gudk5rpk.default
FF ProfilePath: C:\Users\korna\AppData\Roaming\Mozilla\Firefox\Profiles\gudk5rpk.default [2023-02-19]
FF Notifications: Mozilla\Firefox\Profiles\gudk5rpk.default -> hxxps://web.whatsapp.com; hxxps://forums.flightsimlabs.com; hxxps://orbxdirect.com; hxxps://webinterface.nitrado.net; hxxps://orbxsystems.com; hxxps://www.pinterest.de; hxxps://www.lieferando.de; hxxps://dms.vatsim-germany.org; hxxps://t3n.de; hxxps://community.teamspeak.com; hxxps://nzzas.nzz.ch; hxxps://www.nvidia.com
FF Extension: (Avira Browserschutz) - C:\Users\korna\AppData\Roaming\Mozilla\Firefox\Profiles\gudk5rpk.default\Extensions\abs@avira.com.xpi [2022-04-30]
FF Extension: (Feed Preview) - C:\Users\korna\AppData\Roaming\Mozilla\Firefox\Profiles\gudk5rpk.default\Extensions\feed-preview@code.guido-berhoerster.org.xpi [2021-04-21]
FF Extension: (1Password – Passwort-Manager) - C:\Users\korna\AppData\Roaming\Mozilla\Firefox\Profiles\gudk5rpk.default\Extensions\{d634138d-c276-4fc8-924b-40a0ea21d284}.xpi [2023-02-03]
FF Plugin: @java.com/DTPlugin,version=11.361.2 -> C:\Program Files\Java\jre1.8.0_361\bin\dtplugin\npDeployJava1.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.361.2 -> C:\Program Files\Java\jre1.8.0_361\bin\plugin2\npjp2.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-11-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2023-02-14] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @Citrix.com/npican -> C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll [2020-03-18] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2022-06-01] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.cpdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2022-06-01] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2022-06-01] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2022-06-01] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2022-06-01] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-11-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2022-10-25] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2022-10-25] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.12 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2022-10-25] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.14 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2022-10-25] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.16 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2022-10-25] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.18 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2022-10-25] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2022-10-25] (VideoLAN -> VideoLAN)

Chrome:
=======
CHR Profile: C:\Users\korna\AppData\Local\Google\Chrome\User Data\Default [2022-06-23]
CHR StartupUrls: Default -> "hxxps://www.google.com/"
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2022-09-26] (Adobe Inc. -> Adobe Inc.)
R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [7702560 2022-11-27] (G DATA CyberDefense AG -> G DATA Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G DATA\AntiVirus\AVK\AVKWCtlx64.exe [3841064 2022-11-27] (G DATA CyberDefense AG -> G DATA CyberDefense AG)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8885112 2022-11-02] (BattlEye Innovations e.K. -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12553648 2023-02-02] (Microsoft Corporation -> Microsoft Corporation)
R2 CWAUpdaterService; C:\Program Files (x86)\Citrix\ICA Client\Receiver\UpdaterService.exe [40544 2020-03-11] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46824 2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [811496 2022-07-16] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2022-07-11] (Epic Games Inc. -> Epic Games, Inc.)
R2 FoxitReaderUpdateService; C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe [2358800 2022-05-19] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
S3 GalaxyClientService; D:\GOG Galaxy\GalaxyClientService.exe [2275928 2022-08-13] (GOG Sp. z o.o. -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [7166552 2022-05-20] (GOG Sp. z o.o. -> GOG.com)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [2122776 2022-11-27] (G DATA CyberDefense AG -> G DATA Software AG)
R2 Jotta VSS Service; C:\Program Files\Jotta\vss\jVSS.exe [111224 2018-10-16] (Jotta AS -> )
R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [11040160 2021-10-13] (Logitech Inc -> Logitech, Inc.)
R2 nebula; C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe [4489352 2019-06-12] (Logitech Inc -> Logitech)
S3 Origin Client Service; D:\Sims4\Origin\OriginClientService.exe [2579264 2023-02-07] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; D:\Sims4\Origin\OriginWebHelperService.exe [3497800 2023-02-07] (Electronic Arts, Inc. -> Electronic Arts)
S3 OverwolfUpdater; C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2645880 2023-02-01] (Overwolf Ltd -> Overwolf LTD)
S3 OVRLibraryService; C:\Program Files\Oculus\Support\oculus-librarian\OVRLibraryService.exe [144632 2022-02-10] (Oculus VR, LLC -> Facebook Technologies, LLC)
S3 OVRService; C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe [511736 2022-02-10] (Oculus VR, LLC -> Facebook Technologies, LLC)
S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [2703192 2022-12-06] (Rockstar Games, Inc. -> Rockstar Games)
R2 SaiDOutput; C:\Program Files\Logitech\DirectOutput\DirectOutputService.exe [231560 2018-09-04] (Logitech Inc -> Logitech)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [224184 2023-02-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [14802240 2022-09-14] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2209.7-0\NisSrv.exe [3170576 2022-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2209.7-0\MsMpEng.exe [133584 2022-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 XSplit_VCam_Updater; C:\Program Files\XSplit\VCam\XSplit_VCam_Updater.exe [3206520 2022-03-04] (SplitmediaLabs Limited -> XSplit)
R2 XSpltVidSvc; C:\Program Files\XSplit\VCam\service\XSpltVidSvc.exe [263544 2022-03-04] (SplitmediaLabs Limited -> SplitmediaLabs Limited)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_36f8a434e9b7b9f2\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_36f8a434e9b7b9f2\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 GDElam; C:\WINDOWS\System32\DRIVERS\GDElam.sys [278504 2022-11-27] (Microsoft Windows Early Launch Anti-malware Publisher -> G DATA CyberDefense AG)
R3 GDKBB; C:\WINDOWS\system32\drivers\GDKBB64.sys [35776 2022-12-07] (Microsoft Windows Hardware Compatibility Publisher -> G DATA CyberDefense AG)
R3 GDKBFlt; C:\WINDOWS\system32\drivers\GDKBFlt64.sys [38984 2022-12-07] (G DATA Software AG -> G DATA Software AG)
R1 GDMnIcpt; C:\WINDOWS\system32\drivers\MiniIcpt.sys [896424 2022-10-16] (Microsoft Windows Hardware Compatibility Publisher -> G DATA CyberDefense AG)
R3 GDNetflt; C:\WINDOWS\System32\DRIVERS\gdnetflt.sys [127928 2022-11-27] (Microsoft Windows Hardware Compatibility Publisher -> G DATA Software AG)
R3 GDPkIcpt; C:\WINDOWS\system32\drivers\PktIcpt.sys [313768 2022-12-07] (Microsoft Windows Hardware Compatibility Publisher -> G DATA CyberDefense AG)
R1 gdwfpcd; C:\WINDOWS\System32\drivers\gdwfpcd64.sys [78760 2022-12-07] (Microsoft Windows Hardware Compatibility Publisher -> G DATA Software AG)
S3 GRD; C:\WINDOWS\system32\drivers\GRD.sys [125640 2023-02-02] (G DATA Software AG -> G Data Software)
R1 HookCentre; C:\WINDOWS\system32\drivers\HookCentre.sys [327104 2022-10-16] (Microsoft Windows Hardware Compatibility Publisher -> G DATA CyberDefense AG)
S3 Larmkanal; C:\WINDOWS\System32\drivers\Larmkanal.sys [33112 2015-09-02] (ADORIASOFT LLC -> Adoriasoft LLC)
R3 logi_audio_surround; C:\WINDOWS\system32\drivers\logi_audio_surround.sys [44496 2021-10-13] (Logitech Inc -> Logitech)
R3 logi_joy_bus_enum; C:\WINDOWS\system32\drivers\logi_joy_bus_enum.sys [33528 2022-04-28] (WDKTestCert builder,132743893872553407 -> Logitech)
R3 logi_joy_xlcore; C:\WINDOWS\system32\drivers\logi_joy_xlcore.sys [62904 2022-04-28] (WDKTestCert builder,132743893872553407 -> Logitech)
R3 LSaiMini; C:\WINDOWS\System32\drivers\LSaiMini.sys [30840 2018-09-04] (WDKTestCert SYSTEM,131245371151827277 -> Logitech)
R3 LSaiNtBus; C:\WINDOWS\system32\drivers\LSaiBus.sys [70456 2018-09-04] (WDKTestCert SYSTEM,131245371151827277 -> Logitech)
S3 mcaudrv_simple; C:\WINDOWS\system32\drivers\mcaudrv_x64.sys [35960 2014-12-29] (ManyCam -> Visicom Media Inc.)
R3 NvModuleTracker; C:\WINDOWS\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_0c1cc60a4b422185\NvModuleTracker.sys [45656 2022-07-14] (Nvidia Corporation -> NVIDIA Corporation)
R3 oculusvad_oculusvad; C:\WINDOWS\System32\drivers\oculusvad.sys [75280 2022-02-10] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
S3 OCULUSVRHEADSET; C:\WINDOWS\System32\drivers\OCULUS119B.sys [1887232 2019-07-28] (C-MEDIA ELECTRONICS INC. -> OCULUS)
R3 Oculus_ViGEmBus; C:\WINDOWS\System32\drivers\Oculus_ViGEmBus.sys [32856 2019-07-28] (Oculus VR, LLC -> Facebook Inc.)
S3 Phosgene; C:\WINDOWS\system32\DRIVERS\Phosgene.sys [34136 2015-09-02] (ADORIASOFT LLC -> Adoriasoft LLC)
S3 SaiG2221; C:\WINDOWS\System32\drivers\SaiG2221.sys [227128 2018-09-04] (WDKTestCert SYSTEM,131245371151827277 -> Logitech)
S3 SaiGa221; C:\WINDOWS\System32\drivers\SaiGa221.sys [227128 2018-09-04] (WDKTestCert SYSTEM,131245371151827277 -> Logitech)
S3 SaiH0BAC; C:\WINDOWS\system32\DRIVERS\SaiH0BAC.sys [176128 2007-07-02] (Saitek -> Saitek)
S3 SaiK2221; C:\WINDOWS\system32\DRIVERS\SaiK2221.sys [227128 2018-09-04] (WDKTestCert SYSTEM,131245371151827277 -> Logitech)
S3 SaiKa221; C:\WINDOWS\system32\DRIVERS\SaiKa221.sys [227128 2018-09-04] (WDKTestCert SYSTEM,131245371151827277 -> Logitech)
S3 SaiU2221; C:\WINDOWS\system32\DRIVERS\SaiU2221.sys [33512 2018-09-04] (WDKTestCert SYSTEM,131245371151827277 -> Logitech)
S3 SaiUa221; C:\WINDOWS\system32\DRIVERS\SaiUa221.sys [33512 2018-09-04] (WDKTestCert SYSTEM,131245371151827277 -> Logitech)
R3 SnapCameraVirtualDevice; C:\WINDOWS\System32\drivers\SnapCameraVirtualDevice.sys [2800232 2020-10-12] (Snap Inc. -> Windows (R) Win 7 DDK provider)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167544 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 VBAudioVMAUXVAIOMME; C:\WINDOWS\system32\DRIVERS\vbaudio_vmauxvaio64_win7.sys [41192 2018-03-22] (Vincent Burel -> Windows (R) Win 7 DDK provider)
S3 VBAudioVMVAIOMME; C:\WINDOWS\system32\DRIVERS\vbaudio_vmvaio64_win7.sys [41192 2018-03-22] (Vincent Burel -> Windows (R) Win 7 DDK provider)
R1 vbdenum; C:\WINDOWS\System32\drivers\vbdenum.sys [119432 2019-12-16] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
R3 VCamSDK; C:\WINDOWS\system32\DRIVERS\VCamSDK.sys [1092456 2021-01-06] (Shanghai Yitu Information Technology Co., Ltd. -> e2eSoft)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [49616 2022-10-14] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [455968 2022-10-14] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [95520 2022-10-14] (Microsoft Windows -> Microsoft Corporation)
R3 XSpltVid; C:\WINDOWS\system32\DRIVERS\XSpltVid.sys [122376 2021-08-24] (Microsoft Windows Hardware Compatibility Publisher -> SplitmediaLabs Limited)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2023-02-19 14:50 - 2023-02-19 14:50 - 000037593 _____ C:\Users\korna\Desktop\FRST.txt
2023-02-19 14:41 - 2023-02-19 14:50 - 000000000 ____D C:\FRST
2023-02-19 14:41 - 2023-02-19 14:41 - 002378240 _____ (Farbar) C:\Users\korna\Desktop\FRST64.exe
2023-02-19 13:08 - 2023-02-19 13:08 - 000000000 ____D C:\WINDOWS\Minidump
2023-02-18 22:43 - 2023-02-18 23:06 - 000122368 _____ C:\Users\korna\Desktop\XXXXXXXXXXXXXXXXXXXXX
2023-02-18 22:43 - 2023-02-18 14:19 - 000118272 _____ C:\Users\korna\Desktop\Musterdatei_CSV-Import - Kopie.xls
2023-02-18 17:20 - 2023-02-18 17:20 - 000222109 _____ C:\Users\korna\Downloads\XXXXXXXXXXXXXXXXXXXXXX
2023-02-18 14:19 - 2023-02-18 14:19 - 000118272 _____ C:\Users\korna\Desktop\Musterdatei_CSV-Import.xls
2023-02-18 12:09 - 2023-02-18 12:09 - 000220408 _____ C:\Users\korna\Desktop\WhatsApp Image 2023-02-17 at 19.21.52 (1).jpeg
2023-02-18 11:53 - 2023-02-18 11:53 - 000427219 _____ C:\Users\korna\Desktop\kyoScan-‎2‎.‎18‎.‎2023-‎11‎.‎53‎.‎45.pdf
2023-02-17 11:49 - 2023-02-17 11:49 - 000000000 ____D C:\Users\korna\AppData\LocalLow\Monomi Park
2023-02-17 11:25 - 2023-02-17 11:25 - 000208482 _____ C:\Users\korna\Desktop\WhatsApp Image 2023-02-17 at 11.22.50 (1).jpeg
2023-02-17 11:25 - 2023-02-17 11:25 - 000185022 _____ C:\Users\korna\Desktop\WhatsApp Image 2023-02-17 at 11.22.49.jpeg
2023-02-17 11:25 - 2023-02-17 11:25 - 000163795 _____ C:\Users\korna\Desktop\WhatsApp Image 2023-02-17 at 11.22.49 (1).jpeg
2023-02-17 11:23 - 2023-02-17 11:23 - 000318386 _____ C:\Users\korna\Desktop\WhatsApp Image 2023-02-17 at 11.22.50.jpeg
2023-02-16 12:33 - 2023-02-16 12:33 - 001017970 _____ C:\Users\korna\Desktop\XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
2023-02-15 20:40 - 2023-02-15 20:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2023-02-15 14:01 - 2023-02-15 14:01 - 000000000 _____ C:\Users\korna\Downloads\XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
2023-02-15 13:53 - 2023-02-15 13:53 - 000165017 _____ C:\Users\korna\Desktop\kyoScan-‎2‎.‎15‎.‎2023-‎13‎.‎53‎.‎34.pdf
2023-02-15 12:18 - 2023-02-15 12:18 - 000320308 _____ C:\Users\korna\Desktop\XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
2023-02-15 10:11 - 2023-02-15 11:18 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-02-15 09:33 - 2023-02-15 09:33 - 000000000 ___HD C:\$WinREAgent
2023-02-13 19:55 - 2023-02-13 19:55 - 000665110 _____ C:\Users\korna\Downloads\488-444fieldDokument.pdf
2023-02-13 19:52 - 2023-02-13 19:52 - 000125957 _____ C:\Users\korna\Desktop\XXXXXXXXXXXXXXXXXXXXXXXXXXXXX
2023-02-12 21:27 - 2023-02-12 21:27 - 000451373 _____ C:\Users\korna\Downloads\XXXXXXXXXXXXXXXXXXXXXXXX
2023-02-12 21:11 - 2023-02-12 21:11 - 001250273 _____ C:\Users\korna\Downloads\speisekarte.pdf
2023-02-11 15:45 - 2023-02-04 00:00 - 002237024 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2023-02-11 15:45 - 2023-02-04 00:00 - 002237024 _____ C:\WINDOWS\system32\vulkaninfo.exe
2023-02-11 15:45 - 2023-02-04 00:00 - 001642568 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2023-02-11 15:45 - 2023-02-04 00:00 - 001642568 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2023-02-11 15:45 - 2023-02-04 00:00 - 001487376 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2023-02-11 15:45 - 2023-02-04 00:00 - 001444448 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2023-02-11 15:45 - 2023-02-04 00:00 - 001444448 _____ C:\WINDOWS\system32\vulkan-1.dll
2023-02-11 15:45 - 2023-02-04 00:00 - 001227304 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2023-02-11 15:45 - 2023-02-04 00:00 - 001168968 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2023-02-11 15:45 - 2023-02-04 00:00 - 001168968 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2023-02-11 15:45 - 2023-02-03 23:54 - 000671736 _____ C:\WINDOWS\system32\nvofapi64.dll
2023-02-11 15:45 - 2023-02-03 23:54 - 000507392 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2023-02-11 15:45 - 2023-02-03 23:53 - 001532936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2023-02-11 15:45 - 2023-02-03 23:53 - 001192440 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2023-02-11 15:45 - 2023-02-03 23:53 - 000865296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2023-02-11 15:45 - 2023-02-03 23:52 - 002164264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2023-02-11 15:45 - 2023-02-03 23:52 - 001619960 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2023-02-11 15:45 - 2023-02-03 23:52 - 000950264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2023-02-11 15:45 - 2023-02-03 23:52 - 000748048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2023-02-11 15:45 - 2023-02-03 23:52 - 000734720 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2023-02-11 15:45 - 2023-02-03 23:51 - 012453368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2023-02-11 15:45 - 2023-02-03 23:51 - 010220552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2023-02-11 15:45 - 2023-02-03 23:51 - 005891080 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2023-02-11 15:45 - 2023-02-03 23:51 - 005865976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2023-02-11 15:45 - 2023-02-03 23:51 - 003334696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2023-02-11 15:45 - 2023-02-03 23:51 - 000457720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2023-02-11 15:45 - 2023-02-03 23:50 - 005819880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2023-02-11 15:45 - 2023-02-03 23:49 - 000852984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2023-02-11 15:45 - 2023-02-03 00:10 - 000101010 _____ C:\WINDOWS\system32\nvinfo.pb
2023-02-11 15:44 - 2023-02-11 15:44 - 012007944 _____ (F-Secure Corporation) C:\Users\korna\Downloads\F-SecureOnlineScanner.exe
2023-02-11 15:36 - 2023-02-11 15:36 - 005541016 _____ (Stanislav Polshyn & Trend Micro Inc.) C:\Users\korna\Downloads\hijackthis.exe
2023-02-09 07:18 - 2023-02-09 07:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2023-02-08 10:24 - 2023-02-08 10:24 - 000063662 _____ C:\Users\korna\Downloads\XXXXXXXXXXXXXXXXXXXXXXXXXXXX
2023-02-07 17:58 - 2023-02-07 17:58 - 000368808 _____ C:\Users\korna\Downloads\XXXXXXXXXXXXXXXXXXXXXXXXXXX
2023-02-07 17:49 - 2023-02-07 17:49 - 000539612 _____ C:\Users\korna\Downloads\260-2729fieldDokument.pdf
2023-02-07 13:03 - 2023-02-07 13:03 - 000046824 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2023-02-06 19:13 - 2023-02-06 19:13 - 000051277 _____ C:\Users\korna\Desktop\XXXXXXXXXXXXXXXXXXXXXXXXXXX
2023-02-05 18:32 - 2023-02-05 18:32 - 000000000 ____D C:\Users\korna\Documents\Avalanche Studios
2023-02-05 17:41 - 2023-02-05 17:41 - 011905648 _____ (Tim Kosse) C:\Users\korna\Downloads\FileZilla_3.62.2_win64-setup.exe
2023-02-04 20:53 - 2023-02-04 20:53 - 002195483 _____ C:\Users\korna\Desktop\kyoScan-‎2‎.‎4‎.‎2023-‎20‎.‎53‎.‎10.pdf
2023-02-04 20:51 - 2023-02-04 20:51 - 001035795 _____ C:\Users\korna\Desktop\kyoScan-‎2‎.‎4‎.‎2023-‎20‎.‎51‎.‎30.pdf
2023-02-03 13:51 - 2023-02-03 13:51 - 001505689 _____ C:\Users\korna\Downloads\Show.pdf
2023-02-03 11:44 - 2023-02-03 11:47 - 000000000 ____D C:\Users\korna\AppData\Roaming\SpardaSecureApp
2023-02-03 11:44 - 2023-02-03 11:44 - 000002084 _____ C:\Users\korna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpardaSecureApp.lnk
2023-02-03 11:44 - 2023-02-03 11:44 - 000000000 ____D C:\Users\korna\AppData\Roaming\Sparda
2023-02-03 11:44 - 2023-02-03 11:44 - 000000000 ____D C:\Users\korna\AppData\Local\SpardaSecureApp
2023-02-03 11:43 - 2023-02-03 11:43 - 049438752 _____ C:\Users\korna\Downloads\spardasecureapp_p.exe
2023-02-02 20:49 - 2023-02-02 20:49 - 000665110 _____ C:\Users\korna\Desktop\488-444fieldDokument.pdf
2023-02-02 11:59 - 2023-02-02 11:59 - 000000000 ____D C:\Users\korna\AppData\LocalLow\Stunlock Studios
2023-02-02 10:03 - 2023-02-02 10:03 - 001308334 _____ C:\Users\korna\Desktop\XXXXXXXXXXXXXXXXXXXXXXXXXXX
2023-02-02 09:56 - 2023-02-02 10:38 - 000000000 ____D C:\Users\korna\AppData\Roaming\paradox-launcher-v2
2023-01-31 08:36 - 2023-01-31 08:36 - 000100366 _____ C:\Users\korna\Desktop\kyoScan-‎1‎.‎31‎.‎2023-‎8‎.‎36‎.‎50.pdf
2023-01-30 09:47 - 2023-01-30 09:54 - 000000000 ____D C:\Users\korna\Desktop\Fähre NOR
2023-01-30 09:09 - 2023-01-30 09:09 - 000356002 _____ C:\Users\korna\Downloads\EajXmwN1.pdf.part
2023-01-30 09:08 - 2023-01-30 09:08 - 000461152 _____ C:\Users\korna\Downloads\Information-Einlagensicherung-12-2022.pdf
2023-01-29 00:31 - 2023-01-29 00:31 - 001529472 _____ C:\Users\korna\Downloads\560-156fieldDokument.pdf
2023-01-28 20:33 - 2023-01-28 20:43 - 000000000 ____D C:\Users\korna\Documents\Papa

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2023-02-19 14:50 - 2022-02-09 15:24 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-02-19 14:49 - 2017-05-14 22:08 - 000000000 ____D C:\Users\korna\AppData\LocalLow\Mozilla
2023-02-19 14:40 - 2022-11-13 22:20 - 001722998 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-02-19 14:40 - 2019-12-07 15:51 - 000743670 _____ C:\WINDOWS\system32\perfh007.dat
2023-02-19 14:40 - 2019-12-07 15:51 - 000150092 _____ C:\WINDOWS\system32\perfc007.dat
2023-02-19 14:40 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2023-02-19 14:38 - 2020-05-31 21:07 - 000000000 ____D C:\Users\korna\AppData\Local\1Password
2023-02-19 14:37 - 2023-01-02 12:30 - 000000000 ____D C:\Users\korna\AppData\Roaming\1Password
2023-02-19 14:35 - 2020-05-29 15:44 - 000000000 ____D C:\Program Files (x86)\Google
2023-02-19 14:33 - 2022-11-13 22:17 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-02-19 14:33 - 2022-09-23 05:53 - 000000000 ____D C:\Intel
2023-02-19 14:33 - 2020-06-07 18:57 - 000008192 ___SH C:\DumpStack.log.tmp
2023-02-19 14:33 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2023-02-19 14:33 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-02-19 14:33 - 2017-06-04 00:22 - 000000000 ____D C:\ProgramData\NVIDIA
2023-02-19 14:33 - 2017-05-15 18:34 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2023-02-19 14:32 - 2022-11-13 11:35 - 000000000 ____D C:\Users\korna
2023-02-19 14:32 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2023-02-19 14:31 - 2022-11-13 22:09 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-02-19 13:08 - 2023-01-08 14:19 - 002065897 ____N C:\WINDOWS\Minidump\021923-7140-01.dmp
2023-02-19 13:05 - 2019-12-07 10:03 - 000065536 _____ C:\WINDOWS\system32\config\ELAM
2023-02-19 13:02 - 2020-08-30 10:31 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-02-19 13:02 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-02-19 13:02 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-02-19 13:00 - 2017-06-06 17:11 - 000000000 ____D C:\Users\korna\AppData\Local\CrashDumps
2023-02-18 22:43 - 2018-02-13 20:46 - 000000000 ____D C:\Users\korna\AppData\Roaming\discord
2023-02-18 22:43 - 2017-11-24 18:05 - 000000000 ____D C:\Users\korna\AppData\Roaming\WhatsApp
2023-02-18 22:43 - 2017-11-22 22:26 - 000000000 ____D C:\Users\korna\AppData\Local\Packages
2023-02-18 15:54 - 2018-02-13 20:46 - 000000000 ____D C:\Users\korna\AppData\Local\Discord
2023-02-18 15:26 - 2022-11-13 22:17 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2023-02-18 15:26 - 2022-10-12 16:27 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2023-02-18 11:39 - 2020-07-12 15:48 - 000001352 _____ C:\Users\korna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\1Password.lnk
2023-02-17 18:35 - 2019-02-27 19:44 - 000000000 ____D C:\Users\Public\Logi
2023-02-17 18:32 - 2017-05-14 22:23 - 000000000 ____D C:\Users\korna\AppData\Local\Battle.net
2023-02-17 12:59 - 2017-05-15 18:43 - 000000000 ____D C:\Users\korna\AppData\Roaming\TS3Client
2023-02-16 23:48 - 2019-12-28 12:29 - 000000000 ____D C:\Users\korna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2023-02-16 00:14 - 2017-06-11 15:04 - 000000000 ____D C:\Users\korna\AppData\Roaming\vlc
2023-02-16 00:12 - 2020-12-05 13:09 - 000000000 ____D C:\Users\korna\AppData\Roaming\dvdcss
2023-02-15 22:43 - 2017-05-14 22:18 - 000000000 ____D C:\Users\korna\AppData\Roaming\Battle.net
2023-02-15 22:23 - 2018-05-15 20:48 - 000000000 ____D C:\Users\korna\AppData\Local\D3DSCache
2023-02-15 16:26 - 2018-03-18 10:15 - 000000000 ____D C:\Users\korna\AppData\Roaming\.minecraft
2023-02-15 14:02 - 2021-08-31 18:09 - 000000000 ____D C:\Users\korna\Desktop\Versandnachweise
2023-02-15 11:18 - 2022-11-13 22:09 - 000385336 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-02-15 11:18 - 2017-05-14 22:08 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-02-15 11:17 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2023-02-15 11:17 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-02-15 11:17 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2023-02-15 11:17 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-02-15 11:17 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2023-02-15 11:17 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-02-15 11:17 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\DDFs
2023-02-15 11:17 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2023-02-15 11:17 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-02-15 10:45 - 2017-05-15 18:13 - 000000000 ____D C:\Users\korna\Documents\Organisatorisches
2023-02-15 10:36 - 2022-11-13 22:17 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2023-02-15 10:36 - 2017-05-14 22:08 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-02-15 09:39 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-02-15 09:37 - 2022-11-13 22:10 - 003015680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-02-15 09:33 - 2017-05-16 05:17 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-02-15 09:30 - 2017-05-16 05:17 - 149955784 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-02-14 15:27 - 2020-05-29 15:44 - 000002293 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2023-02-12 21:19 - 2019-07-27 11:10 - 000000000 ____D C:\Users\korna\AppData\Local\The Witcher
2023-02-12 10:13 - 2022-10-21 17:10 - 000000000 ____D C:\Users\korna\AppData\Local\FSDART
2023-02-11 15:48 - 2017-05-14 22:45 - 000000000 ____D C:\Users\korna\AppData\Local\NVIDIA
2023-02-11 15:46 - 2022-10-21 17:10 - 000000000 ____D C:\ProgramData\F-Secure
2023-02-10 15:19 - 2017-11-08 11:46 - 000000000 ____D C:\ProgramData\Origin
2023-02-09 07:22 - 2017-05-29 18:08 - 000001228 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2023-02-09 07:22 - 2017-05-29 18:08 - 000001224 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2023-02-09 07:18 - 2017-05-29 18:08 - 000000000 ____D C:\Program Files (x86)\Dropbox
2023-02-09 07:07 - 2022-11-13 22:17 - 000004288 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineUA
2023-02-09 07:07 - 2022-11-13 22:17 - 000004056 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineCore
2023-02-08 09:47 - 2022-11-13 22:17 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-02-08 09:47 - 2022-11-13 22:17 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-02-07 16:21 - 2022-08-04 12:21 - 000000000 ____D C:\Program Files (x86)\Overwolf
2023-02-06 22:21 - 2022-07-11 10:50 - 000000000 ____D C:\Users\korna\AppData\Local\WhatsApp
2023-02-05 17:46 - 2019-03-03 21:19 - 000000000 ____D C:\Users\korna\AppData\Roaming\FileZilla
2023-02-05 17:42 - 2019-03-03 21:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2023-02-05 17:42 - 2019-03-03 21:19 - 000000000 ____D C:\Program Files\FileZilla FTP Client
2023-02-05 15:27 - 2022-11-13 22:17 - 000004308 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2023-02-05 15:27 - 2022-11-13 22:17 - 000003976 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2023-02-05 15:27 - 2022-11-13 22:17 - 000003940 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2023-02-05 15:27 - 2022-11-13 22:17 - 000003894 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2023-02-05 15:27 - 2022-11-13 22:17 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2023-02-05 15:27 - 2022-11-13 22:17 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2023-02-05 15:27 - 2022-11-13 22:17 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2023-02-05 15:27 - 2022-11-13 22:17 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2023-02-05 15:27 - 2022-11-13 22:17 - 000003654 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2023-02-05 15:27 - 2017-06-04 00:22 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2023-02-05 15:27 - 2017-06-04 00:22 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2023-02-05 15:27 - 2017-06-04 00:22 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2023-02-03 23:48 - 2023-01-05 22:45 - 006517032 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2023-02-03 23:48 - 2022-11-11 22:38 - 007648048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2023-02-03 21:33 - 2022-11-08 19:18 - 000000000 ____D C:\Users\korna\Desktop\Vereinsgründung Förderverein Kita
2023-02-02 09:56 - 2020-02-07 11:56 - 000000000 ____D C:\Users\korna\AppData\Local\Paradox Interactive
2023-02-02 09:36 - 2018-01-16 20:10 - 000000000 ____D C:\Program Files\Microsoft Office
2023-02-02 09:31 - 2022-10-16 10:27 - 000125640 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GRD.sys
2023-02-02 09:27 - 2022-11-13 22:17 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-863764739-3742311988-2442474525-1001
2023-02-02 09:27 - 2022-11-13 22:17 - 000003366 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-863764739-3742311988-2442474525-1001
2023-02-02 09:27 - 2022-11-13 11:35 - 000002395 _____ C:\Users\korna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-01-29 19:44 - 2017-05-25 19:10 - 000000000 ____D C:\Users\korna\AppData\Local\ElevatedDiagnostics
2023-01-28 20:44 - 2017-05-15 20:32 - 000001160 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2023-01-28 20:44 - 2017-05-15 20:32 - 000000000 ____D C:\Program Files\paint.net
2023-01-27 20:41 - 2017-11-24 18:05 - 000000000 ____D C:\Users\korna\AppData\Local\SquirrelTemp
2023-01-27 08:40 - 2021-01-24 13:29 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2023-01-26 08:17 - 2018-10-24 20:16 - 000000000 ____D C:\ProgramData\Jotta
2023-01-21 23:42 - 2019-05-25 19:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2023-01-21 23:42 - 2019-05-25 19:41 - 000000000 ____D C:\Program Files\Java
2023-01-21 21:21 - 2017-07-23 08:37 - 000000000 ____D C:\Users\korna\AppData\Roaming\SpaceEngineers
2023-01-20 17:45 - 2018-11-22 16:11 - 002904632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2023-01-20 17:45 - 2018-11-22 16:11 - 002234920 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2023-01-20 17:45 - 2018-11-22 16:11 - 001297464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvRtmpStreamer64.dll

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2017-08-11 14:18 - 2017-08-11 22:09 - 000148106 _____ () C:\Users\korna\AppData\Roaming\BodyProfileImage.png
2022-10-16 10:11 - 2022-10-16 10:11 - 000000779 _____ () C:\Users\korna\AppData\Roaming\gdscan.log
2022-01-10 09:47 - 2022-09-08 10:40 - 000000016 _____ () C:\Users\korna\AppData\Roaming\obs-virtualcam.txt
2017-08-11 14:18 - 2017-08-11 22:09 - 000200235 _____ () C:\Users\korna\AppData\Roaming\ProfileImage.png
2018-03-22 19:37 - 2018-03-22 19:37 - 000034111 _____ () C:\Users\korna\AppData\Roaming\VoiceMeeterDefault.xml
2017-10-08 16:27 - 2017-10-08 16:27 - 000004096 ____H () C:\Users\korna\AppData\Local\keyfile3.drm
2017-08-12 15:57 - 2017-08-12 15:57 - 000000218 _____ () C:\Users\korna\AppData\Local\recently-used.xbel
2017-11-07 21:27 - 2021-04-03 11:09 - 000007613 _____ () C:\Users\korna\AppData\Local\Resmon.ResmonCfg
2018-01-11 20:46 - 2018-01-11 20:46 - 000000003 _____ () C:\Users\korna\AppData\Local\updater.log
2018-01-11 20:46 - 2022-03-05 20:35 - 000000424 _____ () C:\Users\korna\AppData\Local\UserProducts.xml
2017-08-12 15:57 - 2017-08-12 15:57 - 000000000 _____ () C:\Users\korna\AppData\Local\zenmap.exe.log

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================

kornahn 19.02.2023 15:16
Und hier noch die Addtion.txt

Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 16-02-2023
durchgeführt von kornahn (19-02-2023 14:51:13)
Gestartet von C:\Users\korna\Desktop
Microsoft Windows 10 Pro Version 22H2 19045.2604 (X64) (2022-11-13 21:17:20)
Start-Modus: Normal
==========================================================


==================== Konten: =============================


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-863764739-3742311988-2442474525-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-863764739-3742311988-2442474525-503 - Limited - Disabled)
Gast (S-1-5-21-863764739-3742311988-2442474525-501 - Limited - Disabled)
kornahn (S-1-5-21-863764739-3742311988-2442474525-1001 - Administrator - Enabled) => C:\Users\korna
WDAGUtilityAccount (S-1-5-21-863764739-3742311988-2442474525-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: G DATA ANTIVIRUS (Enabled - Up to date) {F343CCAC-8C30-2EA2-C116-9989D6DFB97F}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: G DATA ANTIVIRUS (Disabled - Up to date) {162CBBAC-D872-54E2-BCED-EF0F44D2D699}
AV: Avira Security (Enabled - Up to date) {76C0BF9F-9FD3-D249-DE2F-7A33A59B9258}
AS: Avira Antivirus (Enabled - Up to date) {33CF8AA2-FA06-4AD4-98AB-332D53DD7FFB}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

1Password (HKU\S-1-5-21-863764739-3742311988-2442474525-1001\...\1Password) (Version: 8.10.0 - AgileBits Inc.)
7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1031-1033-7760-BC15014EA700}) (Version: 22.003.20322 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601032}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Anno 2205 (HKLM-x32\...\Uplay Install 1253) (Version:  - Ubisoft)
Blizzard App (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Cisco Webex Meetings (HKU\S-1-5-21-863764739-3742311988-2442474525-1001\...\ActiveTouchMeetingClient) (Version: 41.7.4 - Cisco Webex LLC)
Citrix Authentication Manager (HKLM-x32\...\{45E53583-B4BA-4FD8-AE8B-CF0DF4C1C292}) (Version: 20.2.0.3 - Citrix Systems, Inc.) Hidden
Citrix Screen Casting for Windows (HKLM-x32\...\{AD72F1CD-E4D5-4B34-ADF6-43062ABB2F2B}) (Version: 19.11.100.46 - Citrix Systems, Inc) Hidden
Citrix Web Helper (HKLM-x32\...\{4C480C75-F86C-490F-8694-8163EB96D350}) (Version: 20.2.0.9 - Citrix Systems, Inc.) Hidden
Citrix Workspace (DV) (HKLM-x32\...\{E739689D-8F10-47CA-A322-BA4158135ABC}) (Version: 20.2.0.25 - Citrix Systems, Inc.) Hidden
Citrix Workspace (USB) (HKLM-x32\...\{132E968E-25DB-4578-847A-3F8B2433832C}) (Version: 20.2.0.25 - Citrix Systems, Inc.) Hidden
Citrix Workspace 2002 (HKLM-x32\...\CitrixOnlinePluginPackWeb) (Version: 20.2.0.25 - Citrix Systems, Inc.)
Citrix WorkSpace Browser (HKLM-x32\...\{D601BE19-3887-4AA8-9BA3-11895A233343}) (Version: 20.2.0.8 - Citrix Systems, Inc.) Hidden
Citrix Workspace Inside (HKLM-x32\...\{E54AAA79-29D8-4FB1-803B-7DF2468C4442}) (Version: 20.2.0.65534 - Citrix Systems, Inc.) Hidden
Citrix Workspace(Aero) (HKLM-x32\...\{504BCC3A-D592-4C69-88D1-B74FA4131C82}) (Version: 20.2.0.25 - Citrix Systems, Inc.) Hidden
CurseForge (HKU\S-1-5-21-863764739-3742311988-2442474525-1001\...\Overwolf_cchhcaiapeikjbdbpfplgmpobbcdkdaphclbmkbj) (Version: 0.206.3.6102 - Overwolf app)
DirectOutput (HKLM\...\{CD56BF03-87F9-47C7-95C4-7794CC603C27}) (Version: 8.0.213.0 - Logitech)
Discord (HKU\S-1-5-21-863764739-3742311988-2442474525-1001\...\Discord) (Version: 0.0.309 - Discord Inc.)
Dropbox (HKLM-x32\...\Dropbox) (Version: 167.4.4719 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.709.1 - Dropbox, Inc.) Hidden
Epic Games Launcher (HKLM-x32\...\{50D3E17D-0AFC-4617-AB00-DDE3099545FA}) (Version: 1.1.183.0 - Epic Games, Inc.)
Epic Online Services (HKLM-x32\...\{19695986-25CE-41AC-9C6F-54794653EDBA}) (Version: 2.0.36.0 - Epic Games, Inc.)
FileZilla 3.62.2 (HKLM-x32\...\FileZilla Client) (Version: 3.62.2 - Tim Kosse)
Foxit PDF Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 12.1.0.15250 - Foxit Software Inc.)
G DATA ANTIVIRUS (HKLM-x32\...\G DATA ANTIVIRUS) (Version: 25.5.13.26 - G DATA CyberDefense AG)
GOG GALAXY (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 110.0.5481.96 - Google LLC)
Intel(R) Chipset Device Software (HKLM\...\{81520FC5-3518-40E9-9803-70CE8A801D07}) (Version: 10.1.1.38 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.6.0.1030 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{808F1EBF-5DE7-4452-B0E2-55EBBE4C45F4}) (Version: 11.6.0.1030 - Intel Corporation) Hidden
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 15.2.0.1020 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{EBE12EC7-60DF-41C2-AAC8-0B2586F15C96}) (Version: 15.2.0.1020 - Intel Corporation) Hidden
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel(R) Corporation) Hidden
Java 8 Update 361 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180361F0}) (Version: 8.0.3610.9 - Oracle Corporation)
Jottacloud version (HKLM\...\Jottacloud_is1) (Version:  - Jotta AS)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Lightshot-5.5.0.7 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.5.0.7 - Skillbrains)
Logitech G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: 2022.4.250563 - Logitech)
Logitech Kameraeinstellungen (HKLM-x32\...\LogiUCDPP) (Version: 2.10.4.0 - Logitech Europe S.A.)
Microsoft Access database engine 2010 (English) (HKLM\...\{90140000-00D1-0409-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Access database engine 2010 (German) (HKLM-x32\...\{90140000-00D1-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Access database engine 2010 (Spanish) (HKLM\...\{90140000-00D1-0C0A-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 110.0.1587.50 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 110.0.1587.49 - Microsoft Corporation)
Microsoft Flight Simulator SimConnect Client v10.0.61259.0 (HKLM-x32\...\{D61CA184-3F6D-4A50-B2CC-7A18447D6A8D}) (Version: 10.0.61259.0 - Microsoft Corporation)
Microsoft GameInput (HKLM-x32\...\{6BBE9278-659F-FA16-E4B8-C2D60DE0DCC7}) (Version: 10.1.22621.1863 - Microsoft Corporation)
Microsoft HEVC Media Extension Installation for Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe (x64) (HKLM\...\{B0169E83-757B-EF66-E2F0-391944D785BC}) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2016 - de-de (HKLM\...\HomeStudentRetail - de-de) (Version: 16.0.16026.20146 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-863764739-3742311988-2442474525-1001\...\OneDriveSetup.exe) (Version: 23.007.0109.0004 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-863764739-3742311988-2442474525-1001\...\Teams) (Version: 1.3.00.21759 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{89581302-705F-42C5-99B0-E368A845DAD5}) (Version: 3.70.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40660 (HKLM\...\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40660 (HKLM\...\{CB0836EC-B072-368D-82B2-D3470BF95707}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.29.30133 (HKLM-x32\...\{295d1583-fdb9-414b-a4c8-da539362a26b}) (Version: 14.29.30133.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.29.30133 (HKLM-x32\...\{38b2c744-ad08-4d5b-91a2-3fb6f739ff3e}) (Version: 14.29.30133.0 - Microsoft Corporation)
Microsoft Visual C++ 2019 X64 Additional Runtime - 14.29.30133 (HKLM\...\{E699E009-1C3C-4E50-9B57-2B39F0954C7F}) (Version: 14.29.30133 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.29.30133 (HKLM\...\{6CD9E9ED-906D-4196-8DC3-F987D2F6615F}) (Version: 14.29.30133 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.29.30133 (HKLM-x32\...\{42667D2E-B054-46C1-9D46-2EE1332C14C1}) (Version: 14.29.30133 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.29.30133 (HKLM-x32\...\{EC9807DE-B577-47B1-A024-0251805ACF24}) (Version: 14.29.30133 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Minecraft Launcher (HKLM-x32\...\{D0972543-9D51-4A1A-A765-E5A7B1CB09E5}) (Version: 1.0.0.0 - Mojang)
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 110.0 (x64 de)) (Version: 110.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 63.0 - Mozilla)
Mozilla Thunderbird (x86 de) (HKU\S-1-5-21-863764739-3742311988-2442474525-1001\...\Mozilla Thunderbird 102.7.2 (x86 de)) (Version: 102.7.2 - Mozilla)
Mozilla Thunderbird 52.1.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 52.1.0 (x86 de)) (Version: 52.1.0 - Mozilla)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.8 - Notepad++ Team)
NVIDIA FrameView SDK 1.3.8513.32290073 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.3.8513.32290073 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.27.0.112 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.27.0.112 - NVIDIA Corporation)
NVIDIA Grafiktreiber 528.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 528.49 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.39.16 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.39.16 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 25.0.8 - OBS Project)
Oculus (HKLM\...\Oculus) (Version: <3 - Facebook Technologies, LLC)
Oculus Rift DK2 Sensor Driver (HKLM\...\{F786EF4E-73FE-4700-AC19-FFC0B2298F20}) (Version: 1.0.0.0 - Oculus VR, LLC) Hidden
Oculus Rift Monitor Driver (HKLM\...\{E932D5B4-547A-4959-B642-3816836283E3}) (Version: 1.0.1.0 - Oculus VR, LLC) Hidden
Oculus Rift Sensor Driver (HKLM\...\{E724ED40-8962-4987-901D-57AC8C9E41CD}) (Version: 1.0.20.0 - Oculus VR, LLC) Hidden
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.15726.20202 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.16026.20146 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.15726.20202 - Microsoft Corporation) Hidden
Online Plug-in (HKLM-x32\...\{5D063E9E-A4B0-4911-A131-2BAF83638386}) (Version: 20.2.0.25 - Citrix Systems, Inc.) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenTTD 1.10.3 (HKLM-x32\...\OpenTTD) (Version: 1.10.3 - OpenTTD)
Origin (HKLM-x32\...\Origin) (Version: 10.5.119.52718 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.218.0.8 - Overwolf Ltd.)
paint.net (HKLM\...\{6D165307-EFDF-4906-8DB4-0DB7FD6D0CCC}) (Version: 5.0.1 - dotPDN LLC)
Paradox Launcher v2 (HKLM\...\{66DA3501-823A-4F07-A20D-C64495A59DC8}) (Version: 2.1.0 - Paradox Interactive)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7614 - Realtek Semiconductor Corp.)
Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.67.1178 - Rockstar Games)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.1.6.5 - Rockstar Games)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.63.0 - Samsung Electronics Co., Ltd.)
Self-Service Plug-in (HKLM-x32\...\{EF7338E4-1CCD-479D-ABF8-846CEF9A9A81}) (Version: 20.2.0.9 - Citrix Systems, Inc.) Hidden
Sky Go 21.4.2.0 (HKU\S-1-5-21-863764739-3742311988-2442474525-1001\...\com.bskyb.skygoplayer_is1) (Version: 21.4.2.0 - Sky)
Skype Version 8.92 (HKLM-x32\...\Skype_is1) (Version: 8.92 - Skype Technologies S.A.)
Snap Camera 1.18.0 (HKLM-x32\...\{024A6CF5-627D-497F-980B-B9A6EC5C40AF}_is1) (Version: 1.18.0 - Snap Inc.)
SpardaSecureApp (HKU\S-1-5-21-863764739-3742311988-2442474525-1001\...\{403f16a3-7af3-497a-8788-3d9e2910a424}) (Version: 2.0.4.0 - SpardaSecureApp)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.1.4 - TeamSpeak Systems GmbH)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.34.4 - TeamViewer)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 4.8 - Ubisoft)
UE4 Prerequisites (x64) (HKLM\...\{D7B591D8-1091-4A00-A0B3-5301C45E5D51}) (Version: 1.0.14.0 - Epic Games, Inc.) Hidden
UE4 Prerequisites (x64) (HKLM-x32\...\{0d995f46-317b-4b5f-bf3e-9f98bae9d339}) (Version: 1.0.14.0 - Epic Games, Inc.) Hidden
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{C22F49B1-0F67-47DC-A490-E8B4B6558EA9}) (Version: 8.91.0.0 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.18 - VideoLAN)
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
WebM Project Directshow Filters (HKU\S-1-5-21-863764739-3742311988-2442474525-1001\...\webmdshow) (Version:  - )
WhatsApp (HKU\S-1-5-21-863764739-3742311988-2442474525-1001\...\WhatsApp) (Version: 2.2305.7 - WhatsApp)
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
WinRAR 5.40 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
WISO Steuer-Sparbuch 2022 (HKLM-x32\...\{7A65F95B-AF8E-4D06-A9E7-99128987406D}) (Version: 29.08.3260 - Buhl Data Service GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
World of Warcraft Classic (HKLM-x32\...\World of Warcraft Classic) (Version:  - Blizzard Entertainment)
X56 H.O.T.A.S. (HKLM\...\{FC411B84-E868-404E-BBDB-783DD7FC9276}) (Version: 8.0.213.0 - Logitech)
Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)
XMedia Recode 64bit Version 3.5.3.4 (HKLM\...\{D31E6E69-4C6A-42CC-926F-CC7B186864EB}_is1) (Version: 3.5.3.4 - XMedia Recode 64bit)
XSplit VCam (HKLM\...\{431DAB3C-37EF-4BDF-B2DD-62304D754D80}) (Version: 3.0.2203.0404 - XSplit) Hidden
XSplit VCam (HKLM\...\XSplit VCam 3.0.2203.0404) (Version: 3.0.2203.0404 - XSplit)
Xvid 1.2.2 final uninstall (HKLM-x32\...\Xvid_is1) (Version: 1.2 - Xvid team (Koepi))
Zoom (HKU\S-1-5-21-863764739-3742311988-2442474525-1001\...\ZoomUMX) (Version: 5.9.1 (2581) - Zoom Video Communications, Inc.)

Packages:
=========
Fotos-Add-On -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2021-05-08] (Microsoft Corporation)
KYOCERA Print Center -> C:\Program Files\WindowsApps\A97ECD55.KYOCERAPrintCenter_4.1.11108.0_x64__kqmhh0ktdt7dg [2022-12-09] (KYOCERA Document Solutions Inc)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-05-08] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2022-11-13] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2022-11-13] (Microsoft Corporation) [MS Ad]
Minecraft for Windows 10 -> C:\Program Files\WindowsApps\Microsoft.MinecraftUWP_1.19.6201.0_x64__8wekyb3d8bbwe [2023-02-17] (Microsoft Studios)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.963.0_x64__56jybvy8sckqj [2023-02-11] (NVIDIA Corp.)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-863764739-3742311988-2442474525-1001_Classes\CLSID\{1019ADC7-17CB-4489-AFD5-6642C7400ACE}\localserver32 -> C:\Users\korna\AppData\Local\Webex\Webex\Applications\ptOIEx64.exe (Cisco WebEx LLC -> Cisco WebEx LLC)
CustomCLSID: HKU\S-1-5-21-863764739-3742311988-2442474525-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\korna\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20130.1\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-863764739-3742311988-2442474525-1001_Classes\CLSID\{352DBFA0-7AB5-11E8-B567-0800200C9A66} -> [Jottacloud] => E:\JottaCloud Sync\Jottacloud [2018-10-24 20:18]
CustomCLSID: HKU\S-1-5-21-863764739-3742311988-2442474525-1001_Classes\CLSID\{89b2b650-c4dd-d68b-46e7-3176f1973c8b}\localserver32 -> "C:\Program Files\Voicemod Desktop\VoicemodDesktop.exe" -ToastActivated => Keine Datei
CustomCLSID: HKU\S-1-5-21-863764739-3742311988-2442474525-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\korna\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20130.1\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-863764739-3742311988-2442474525-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\korna\Dropbox [2017-05-29 18:13]
ShellIconOverlayIdentifiers: [  DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ JottaExt1] -> {648B08C1-8BB1-46e1-8F8A-64EF3F28D417} => C:\Program Files\Jotta\jottaext64.dll [2019-04-03] (Jotta AS -> )
ShellIconOverlayIdentifiers: [ JottaExt2] -> {648B08C2-8BB1-46e1-8F8A-64EF3F28D417} => C:\Program Files\Jotta\jottaext64.dll [2019-04-03] (Jotta AS -> )
ShellIconOverlayIdentifiers: [ JottaExt3] -> {648B08C3-8BB1-46e1-8F8A-64EF3F28D417} => C:\Program Files\Jotta\jottaext64.dll [2019-04-03] (Jotta AS -> )
ShellIconOverlayIdentifiers-x32: [  DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2018-03-19] (Notepad++ -> )
ContextMenuHandlers1: [AVK9CM] -> {CAF4C320-32F5-11D3-A222-004095200FF2} => C:\Program Files (x86)\G DATA\AntiVirus\AVK\ShellExt64.dll [2022-11-27] (G DATA CyberDefense AG -> G DATA Software AG)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [JottaExt] -> {648B08D1-8BB1-46E1-8F8A-64EF3F28D417} => C:\Program Files\Jotta\jottaext64.dll [2019-04-03] (Jotta AS -> )
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-14] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-14] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4: [JottaExt] -> {648B08D1-8BB1-46E1-8F8A-64EF3F28D417} => C:\Program Files\Jotta\jottaext64.dll [2019-04-03] (Jotta AS -> )
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.60.0.dll [2023-02-07] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [JottaExt] -> {648B08D1-8BB1-46E1-8F8A-64EF3F28D417} => C:\Program Files\Jotta\jottaext64.dll [2019-04-03] (Jotta AS -> )
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_36f8a434e9b7b9f2\nvshext.dll [2023-02-03] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [AVK9CM] -> {CAF4C320-32F5-11D3-A222-004095200FF2} => C:\Program Files (x86)\G DATA\AntiVirus\AVK\ShellExt64.dll [2022-11-27] (G DATA CyberDefense AG -> G DATA Software AG)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-14] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-14] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\system32\frapsv64.dll [105984 2018-09-28] (Beepa P/L) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.VP60] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2014-09-16] (Electronic Arts -> On2.com)
HKLM\...\Drivers32: [vidc.VP61] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2014-09-16] (Electronic Arts -> On2.com)
HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\SysWOW64\frapsvid.dll [94208 2018-09-28] (Beepa P/L) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.XVID] => C:\Windows\SysWOW64\xvidvfw.dll [180224 2009-06-07] () [Datei ist nicht signiert]

==================== Verknüpfungen & WMI ========================

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2018-10-24 20:16 - 2019-10-09 14:48 - 004018176 _____ () [Datei ist nicht signiert] C:\Program Files\Jotta\libGLESv2.dll
2018-10-24 20:16 - 2019-10-09 14:48 - 000381952 _____ () [Datei ist nicht signiert] C:\Program Files\Jotta\libzmq.dll
2018-10-24 20:16 - 2019-10-14 15:45 - 000184320 _____ () [Datei ist nicht signiert] C:\Program Files\Jotta\vss\libzmq.dll
2018-10-24 20:16 - 2014-09-26 10:53 - 002709504 _____ () [Datei ist nicht signiert] C:\Program Files\Jotta\vss\QtCore4.dll
2018-09-04 07:21 - 2018-09-04 07:21 - 000144896 _____ () [Datei ist nicht signiert] C:\Program Files\Logitech\X56\laclient\libssh2.dll
2018-09-04 07:21 - 2018-09-04 07:21 - 000077824 _____ () [Datei ist nicht signiert] C:\Program Files\Logitech\X56\laclient\zlib.dll
2022-11-18 21:38 - 2022-11-07 11:17 - 000387072 _____ () [Datei ist nicht signiert] D:\Steam\bin\cef\cef.win7x64\libegl.dll
2022-11-18 21:38 - 2022-11-07 11:17 - 008052736 _____ () [Datei ist nicht signiert] D:\Steam\bin\cef\cef.win7x64\libglesv2.dll
2002-01-05 04:27 - 2002-01-05 04:27 - 000024576 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\1031\mdmui.dll
2020-04-19 13:33 - 2020-04-19 13:33 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\Root\Office16\AppVIsvSubsystems64.dll
2020-04-19 13:33 - 2020-04-19 13:33 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\Root\Office16\c2r64.dll
2017-08-12 16:07 - 2015-01-19 06:29 - 000120320 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\WINDOWS\System32\E_YLMJJE.DLL
2018-09-04 07:21 - 2018-09-04 07:21 - 000355840 _____ (The cURL library, hxxp://curl.haxx.se/) [Datei ist nicht signiert] C:\Program Files\Logitech\X56\laclient\LIBCURL.dll
2018-10-24 20:16 - 2018-10-16 14:23 - 001652736 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\Jotta\LIBEAY32.dll
2018-10-24 20:16 - 2018-10-16 14:23 - 000345088 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\Jotta\ssleay32.dll
2018-09-04 07:21 - 2018-09-04 07:21 - 002286747 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\Logitech\X56\laclient\LIBEAY32.dll
2018-09-04 07:21 - 2018-09-04 07:21 - 000416627 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\Logitech\X56\laclient\SSLEAY32.dll
2023-02-10 15:19 - 2020-04-10 17:37 - 001282048 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] D:\Sims4\Origin\LIBEAY32.dll
2023-02-10 15:19 - 2020-04-10 17:37 - 000279040 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] D:\Sims4\Origin\ssleay32.dll
2018-10-24 20:16 - 2018-10-16 14:23 - 000241152 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files\Jotta\imageformats\qjpeg.dll
2018-10-24 20:16 - 2018-10-16 14:23 - 000356864 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files\Jotta\imageformats\qtiff.dll
2018-10-24 20:16 - 2018-10-16 14:23 - 001211392 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files\Jotta\platforms\qwindows.dll
2018-10-24 20:16 - 2018-10-16 14:23 - 000028160 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files\Jotta\Qt5Concurrent.dll
2018-10-24 20:16 - 2018-10-16 14:23 - 005659648 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files\Jotta\Qt5Core.dll
2018-10-24 20:16 - 2018-10-16 14:23 - 004607488 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files\Jotta\Qt5Gui.dll
2018-10-24 20:16 - 2018-10-16 14:23 - 001070592 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files\Jotta\Qt5Network.dll
2018-10-24 20:16 - 2018-10-16 14:23 - 001059840 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files\Jotta\Qt5Sql.dll
2018-10-24 20:16 - 2018-10-16 14:23 - 000138752 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files\Jotta\Qt5WebSockets.dll
2018-10-24 20:16 - 2018-10-16 14:23 - 005501952 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files\Jotta\Qt5Widgets.dll
2023-02-10 15:19 - 2020-04-10 17:37 - 001611264 _____ (The Qt Company Ltd) [Datei ist nicht signiert] D:\Sims4\Origin\platforms\qwindows.dll
2023-02-10 15:19 - 2020-04-10 17:37 - 005487104 _____ (The Qt Company Ltd) [Datei ist nicht signiert] D:\Sims4\Origin\Qt5Core.dll
2023-02-10 15:19 - 2020-04-10 17:37 - 005841920 _____ (The Qt Company Ltd) [Datei ist nicht signiert] D:\Sims4\Origin\Qt5Gui.dll
2023-02-10 15:19 - 2020-04-10 17:37 - 001179136 _____ (The Qt Company Ltd) [Datei ist nicht signiert] D:\Sims4\Origin\Qt5Network.dll
2023-02-10 15:19 - 2020-04-10 17:37 - 000146432 _____ (The Qt Company Ltd) [Datei ist nicht signiert] D:\Sims4\Origin\Qt5WebSockets.dll
2023-02-10 15:19 - 2020-04-10 17:37 - 005089792 _____ (The Qt Company Ltd) [Datei ist nicht signiert] D:\Sims4\Origin\Qt5Widgets.dll
2023-02-10 15:19 - 2020-04-10 17:37 - 000184832 _____ (The Qt Company Ltd) [Datei ist nicht signiert] D:\Sims4\Origin\Qt5Xml.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\korna\AppData\Local\Temp:$DATA​ [16]
AlternateDataStreams: C:\Users\korna\Documents\fltlevv5.pdf:com.dropbox.attributes [168]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\S-1-5-21-863764739-3742311988-2442474525-1001 -> {AB85718D-C9E1-4F8F-8A8E-8B3639C483F7} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&intl=de&fr=yset_ie_syc_oracle&type=orcl_default&partnerexternal-oracle=external-oracle
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_361\bin\ssv.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_361\bin\jp2ssv.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2022-11-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-02-02] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-02-02] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-02-02] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-02-02] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-02-02] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-02-02] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-02-02] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-02-02] (Microsoft Corporation -> Microsoft Corporation)
Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-03-18] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-03-18] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-03-18] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-03-18] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-03-18] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-03-18] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-03-18] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-03-18] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-03-18] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-03-18] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-03-18] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-03-18] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-03-18] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-03-18] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-03-18] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-03-18] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2017-09-29 14:46 - 2020-09-09 19:33 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\Oculus\Support\oculus-runtime;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-863764739-3742311988-2442474525-1001\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost => (EnableWebContentEvaluation: 0)
 ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKLM\...\StartupApproved\Run32: => "Dropbox"
HKLM\...\StartupApproved\Run32: => "Navigraph FMS Data Manager"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "ConnectionCenter"
HKLM\...\StartupApproved\Run32: => "Redirector"
HKLM\...\StartupApproved\Run32: => "InstallHelper"
HKU\S-1-5-21-863764739-3742311988-2442474525-1001\...\StartupApproved\Run: => "CiscoMeetingDaemon"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [UDP Query User{5AD884F7-932A-4696-991F-4B1045C252E6}F:\steamlibrary\steamapps\common\destiny 2\destiny2.exe] => (Allow) F:\steamlibrary\steamapps\common\destiny 2\destiny2.exe (Bungie Inc. -> Bungie)
FirewallRules: [TCP Query User{E58BCB6A-2BE0-4AF0-BE5C-C8F84AC69784}F:\steamlibrary\steamapps\common\destiny 2\destiny2.exe] => (Allow) F:\steamlibrary\steamapps\common\destiny 2\destiny2.exe (Bungie Inc. -> Bungie)
FirewallRules: [{57C274FB-3B8B-418A-9F73-D00642F13445}] => (Allow) F:\SteamLibrary\steamapps\common\KeyWe\KeyWe.exe () [Datei ist nicht signiert]
FirewallRules: [{E5C52E97-2078-4B58-B29F-01CFF8DB3A54}] => (Allow) F:\SteamLibrary\steamapps\common\KeyWe\KeyWe.exe () [Datei ist nicht signiert]
FirewallRules: [{BDBA1B82-CF98-4A6A-B576-58B8E5B9C6B6}] => (Allow) F:\SteamLibrary\steamapps\common\RimWorld\RimWorldWin64.exe () [Datei ist nicht signiert]
FirewallRules: [{256A3063-C6AC-49EC-AD84-9F58AA86DCFF}] => (Allow) F:\SteamLibrary\steamapps\common\RimWorld\RimWorldWin64.exe () [Datei ist nicht signiert]
FirewallRules: [{E591E45B-AA77-40C8-AE69-37548CAE1401}] => (Allow) F:\SteamLibrary\steamapps\common\Destiny 2\destiny2launcher.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{834DAB6C-010A-4945-9796-FEB1FF14D855}] => (Allow) F:\SteamLibrary\steamapps\common\Destiny 2\destiny2launcher.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [UDP Query User{EFB3B0A8-8CA0-40F8-B9FA-122B293ECFA5}F:\steamlibrary\steamapps\common\star wars battlefront ii\starwarsbattlefrontii.exe] => (Allow) F:\steamlibrary\steamapps\common\star wars battlefront ii\starwarsbattlefrontii.exe (Electronic Arts Inc.) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{E062544D-575B-4192-927F-BF444E522DE2}F:\steamlibrary\steamapps\common\star wars battlefront ii\starwarsbattlefrontii.exe] => (Allow) F:\steamlibrary\steamapps\common\star wars battlefront ii\starwarsbattlefrontii.exe (Electronic Arts Inc.) [Datei ist nicht signiert]
FirewallRules: [{C1E64D04-1F31-4160-AEE8-9F2ACF347348}] => (Allow) G:\SteamLibrary\steamapps\common\WeHappyFew\GlimpseGame\Binaries\Win64\GlimpseGame.exe (Compulsion Games) [Datei ist nicht signiert]
FirewallRules: [{789DBA8D-1804-45A0-8761-143005CCE7D2}] => (Allow) G:\SteamLibrary\steamapps\common\WeHappyFew\GlimpseGame\Binaries\Win64\GlimpseGame.exe (Compulsion Games) [Datei ist nicht signiert]
FirewallRules: [{7678451E-E572-4810-90E9-AD5D00C3AD23}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{2812B9BF-A6E9-48DF-8EB9-9729505A6194}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{4863011E-0B6D-49CC-BF52-DDF7761ABC6D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{9D924F48-E08F-429D-A6C2-7B302FEB0973}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [UDP Query User{E853666C-CC14-4BF7-B2BA-D9F2099FCF16}D:\overwatch\_retail_\overwatch.exe] => (Allow) D:\overwatch\_retail_\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [TCP Query User{21BDB62C-6E10-4F07-8B48-4CC15B109D18}D:\overwatch\_retail_\overwatch.exe] => (Allow) D:\overwatch\_retail_\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [{AEFB7870-1081-463D-A529-926B79F872E2}] => (Allow) G:\SteamLibrary\steamapps\common\No Man's Sky\Binaries\NMS.exe (Hello Games) [Datei ist nicht signiert]
FirewallRules: [{CC4D924A-BEEC-432F-8ADF-2A1CAF5F7413}] => (Allow) G:\SteamLibrary\steamapps\common\No Man's Sky\Binaries\NMS.exe (Hello Games) [Datei ist nicht signiert]
FirewallRules: [{DF9E3372-0232-4AC3-B31B-B25CCF472BBF}] => (Allow) G:\SteamLibrary\steamapps\common\Settlement Survival\URP\Settlement SurvivalURP.exe => Keine Datei
FirewallRules: [{E3E4CBB3-3953-4D21-83B2-1998C49B99E9}] => (Allow) G:\SteamLibrary\steamapps\common\Settlement Survival\URP\Settlement SurvivalURP.exe => Keine Datei
FirewallRules: [{FA18597C-DE1E-495F-B103-9FD077D5B94C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{03DED78B-B290-43E1-9241-44EE0F4EA3BD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{E44229BF-47F1-4A2F-AF1E-6B5D8E8DA38B}] => (Allow) G:\SteamLibrary\steamapps\common\Factorio\bin\x64\factorio.exe => Keine Datei
FirewallRules: [{34F948A4-C49E-471A-B583-6AFE06A8D1B7}] => (Allow) G:\SteamLibrary\steamapps\common\Factorio\bin\x64\factorio.exe => Keine Datei
FirewallRules: [{82705141-64A2-46FF-B207-98A14DCE4896}] => (Allow) D:\Anno 2205\Bin\Win64\Anno2205.exe (Blue Byte GmbH -> Ubisoft)
FirewallRules: [UDP Query User{FCEE7A86-2F23-48FA-9A7F-4FE86F541934}C:\users\korna\curseforge\minecraft\install\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe] => (Allow) C:\users\korna\curseforge\minecraft\install\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe
FirewallRules: [TCP Query User{F71F68EA-966A-49CA-BB86-29FBB295462B}C:\users\korna\curseforge\minecraft\install\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe] => (Allow) C:\users\korna\curseforge\minecraft\install\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe
FirewallRules: [{F3104360-F47E-4D11-A0B9-6806DD3F5BBB}] => (Allow) D:\Steam\steamapps\common\SteamVR\bin\win32\vrstartup.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{51CA2196-F5C9-4E53-A5B4-1E7F48A0597E}] => (Allow) D:\Steam\steamapps\common\SteamVR\bin\win32\vrstartup.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [UDP Query User{8832607A-0F82-444D-9F69-98AF8E1E6ED0}C:\program files (x86)\minecraft launcher\runtime\java-runtime-beta\windows-x64\java-runtime-beta\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft launcher\runtime\java-runtime-beta\windows-x64\java-runtime-beta\bin\javaw.exe
FirewallRules: [TCP Query User{913AC3F2-427C-419E-9508-F1BD0DF00061}C:\program files (x86)\minecraft launcher\runtime\java-runtime-beta\windows-x64\java-runtime-beta\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft launcher\runtime\java-runtime-beta\windows-x64\java-runtime-beta\bin\javaw.exe
FirewallRules: [UDP Query User{B2C0C315-37C5-4EA8-A5A5-5B8253F48F35}C:\program files\java\jre1.8.0_341\bin\jp2launcher.exe] => (Allow) C:\program files\java\jre1.8.0_341\bin\jp2launcher.exe => Keine Datei
FirewallRules: [TCP Query User{08C4DE14-9043-481C-8A50-3DBDCF27C035}C:\program files\java\jre1.8.0_341\bin\jp2launcher.exe] => (Allow) C:\program files\java\jre1.8.0_341\bin\jp2launcher.exe => Keine Datei
FirewallRules: [{48F2B56B-C68C-4C87-A4FD-2D29CC7C04A7}] => (Allow) F:\SteamLibrary\steamapps\common\Dinkum\Dinkum.exe () [Datei ist nicht signiert]
FirewallRules: [{6B47AB41-43F9-40EB-B69A-DC041F62411B}] => (Allow) F:\SteamLibrary\steamapps\common\Dinkum\Dinkum.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{72CEFAAE-6F58-49F8-92BB-1B8075C27094}D:\epicgameslauncher\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) D:\epicgameslauncher\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{F53E2B36-81B9-4F7E-9F3D-D87C2CBC56B9}D:\epicgameslauncher\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) D:\epicgameslauncher\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{53DA7929-4DEA-474B-AE23-DC9DAF493CD6}C:\users\korna\appdata\roaming\zoom\bin\zoom.exe] => (Allow) C:\users\korna\appdata\roaming\zoom\bin\zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [TCP Query User{3083A8F2-DAAD-4822-B598-7BD8CCDD6C4A}C:\users\korna\appdata\roaming\zoom\bin\zoom.exe] => (Allow) C:\users\korna\appdata\roaming\zoom\bin\zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [UDP Query User{B356AB65-DFE0-4795-B7BB-CABBE5F5F3E4}C:\program files\java\jre1.8.0_331\bin\jp2launcher.exe] => (Allow) C:\program files\java\jre1.8.0_331\bin\jp2launcher.exe => Keine Datei
FirewallRules: [TCP Query User{4A882EE4-7F1C-44B7-B554-B3909BE76005}C:\program files\java\jre1.8.0_331\bin\jp2launcher.exe] => (Allow) C:\program files\java\jre1.8.0_331\bin\jp2launcher.exe => Keine Datei
FirewallRules: [{2272CF86-2E65-4AA3-81A9-3C71CB82AC2F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{AD1B200D-3F73-4F08-B87C-D505963ED640}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{0753560E-8459-4276-8FAE-562374F91B6F}] => (Allow) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{CD76297A-07A6-48A8-A1E4-D62CC73F35D1}] => (Allow) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [UDP Query User{EB3F50F2-E6CC-4565-A449-B23361FC4F8C}D:\steam\steam.exe] => (Allow) D:\steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [TCP Query User{264FF631-D199-4125-85DE-0B5B54BF1E82}D:\steam\steam.exe] => (Allow) D:\steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{D9BD4122-858B-40AE-9F21-83E8BCA16441}] => (Allow) F:\SteamLibrary\steamapps\common\Farming Simulator 22\x64\FarmingSimulator2022Game.exe (GIANTS Software GmbH -> GIANTS Software GmbH)
FirewallRules: [{FFA74476-EF1D-40E0-B594-D75191BE2BD4}] => (Allow) F:\SteamLibrary\steamapps\common\Farming Simulator 22\x64\FarmingSimulator2022Game.exe (GIANTS Software GmbH -> GIANTS Software GmbH)
FirewallRules: [{9CF153CB-4CF9-474C-9BEC-4950A8E5611D}] => (Allow) F:\SteamLibrary\steamapps\common\Railway Empire\RailwayEmpire.exe (Kalypso Media Group -> Gaming Minds Studios GmbH)
FirewallRules: [{EE1FBDB4-D242-45FA-AABF-531A8D741CA3}] => (Allow) F:\SteamLibrary\steamapps\common\Railway Empire\RailwayEmpire.exe (Kalypso Media Group -> Gaming Minds Studios GmbH)
FirewallRules: [{44FB728C-4821-4F35-A003-5CB184B8B9CF}] => (Allow) F:\SteamLibrary\steamapps\common\Red Dead Redemption 2\PlayRDR2.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{F3C4C7CF-CD65-43FB-AA2D-E53F8E8E71DE}] => (Allow) F:\SteamLibrary\steamapps\common\Red Dead Redemption 2\PlayRDR2.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [TCP Query User{F3868F70-A233-4C84-BFB9-4102FCBAC86B}F:\steamlibrary\steamapps\common\red dead redemption 2\rdr2.exe] => (Allow) F:\steamlibrary\steamapps\common\red dead redemption 2\rdr2.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [UDP Query User{2A16C751-062F-44B7-82F0-E5ED00A44266}F:\steamlibrary\steamapps\common\red dead redemption 2\rdr2.exe] => (Allow) F:\steamlibrary\steamapps\common\red dead redemption 2\rdr2.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{25439D8D-6C0F-49EC-9058-EF51139A0306}] => (Allow) F:\SteamLibrary\steamapps\common\OpenTTD\openttd.exe (OpenTTD Distribution LTD -> OpenTTD Development Team)
FirewallRules: [{470D7A83-AAC9-4855-8260-2975BA4D3405}] => (Allow) F:\SteamLibrary\steamapps\common\OpenTTD\openttd.exe (OpenTTD Distribution LTD -> OpenTTD Development Team)
FirewallRules: [{52EB134E-3826-483B-87EF-776EB6D5C330}] => (Allow) F:\SteamLibrary\steamapps\common\Grand Theft Auto V\PlayGTAV.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{3E98D201-98FD-477A-9FE7-6BD23E4DA18F}] => (Allow) F:\SteamLibrary\steamapps\common\Grand Theft Auto V\PlayGTAV.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [TCP Query User{DA71410E-1C92-413F-BB0C-4E6EBC1ECADE}F:\steamlibrary\steamapps\common\grand theft auto v\gta5.exe] => (Allow) F:\steamlibrary\steamapps\common\grand theft auto v\gta5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [UDP Query User{83F4597F-8409-4E31-AE85-9F7FFA3703D1}F:\steamlibrary\steamapps\common\grand theft auto v\gta5.exe] => (Allow) F:\steamlibrary\steamapps\common\grand theft auto v\gta5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{B173D861-0B68-4BE2-9774-6F2A678B3FB5}] => (Allow) D:\Steam\steamapps\common\Mars Horizon\Mars Horizon.exe () [Datei ist nicht signiert]
FirewallRules: [{8AC0C995-134D-458D-AE19-287635A2F699}] => (Allow) D:\Steam\steamapps\common\Mars Horizon\Mars Horizon.exe () [Datei ist nicht signiert]
FirewallRules: [{676C640C-DC6A-4989-861E-3C5E7DB9693D}] => (Allow) D:\Steam\steamapps\common\Cloudpunk\Cloudpunk.exe () [Datei ist nicht signiert]
FirewallRules: [{E03E8020-4118-4C7A-8FC7-808C9B457E37}] => (Allow) D:\Steam\steamapps\common\Cloudpunk\Cloudpunk.exe () [Datei ist nicht signiert]
FirewallRules: [{28BA1D5E-FA25-4665-AAC2-6B086352B4CE}] => (Allow) D:\Steam\steamapps\common\theHunterCotW\theHunterCotW_F.exe () [Datei ist nicht signiert]
FirewallRules: [{8F701F38-0D5D-4012-963F-C19EA46E4565}] => (Allow) D:\Steam\steamapps\common\theHunterCotW\theHunterCotW_F.exe () [Datei ist nicht signiert]
FirewallRules: [{488DB768-887C-4334-A270-A120C114A947}] => (Allow) D:\Steam\steamapps\common\Anno 1800\Bin\Win64\Anno1800.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{47FF0D2A-CF73-4793-B315-40F868505684}] => (Allow) D:\Steam\steamapps\common\Anno 1800\Bin\Win64\Anno1800.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{1A0F46DE-E1DF-4BC2-B31E-CDFF1CBB95E5}] => (Allow) D:\Steam\steamapps\common\Before We Leave\Before We Leave.exe () [Datei ist nicht signiert]
FirewallRules: [{EE52F7EF-AE37-4D7A-8AB0-504A87055261}] => (Allow) D:\Steam\steamapps\common\Before We Leave\Before We Leave.exe () [Datei ist nicht signiert]
FirewallRules: [{F0B7BDA6-3F36-40A6-BF0F-E87989B777D6}] => (Allow) D:\Steam\steamapps\common\Satellite Command\GESGame.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{F128F40E-A4E5-4496-A238-B7BA93FE1BD8}] => (Allow) D:\Steam\steamapps\common\Satellite Command\GESGame.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{85346012-2111-4E08-A4C3-ADE1E9779A1A}] => (Allow) D:\Steam\steamapps\common\Surviving Mars\MarsSteam.exe (Haemimont Games) [Datei ist nicht signiert]
FirewallRules: [{0F117527-B60F-4CC3-8AFA-895C786ED1AE}] => (Allow) D:\Steam\steamapps\common\Surviving Mars\MarsSteam.exe (Haemimont Games) [Datei ist nicht signiert]
FirewallRules: [{1D514D73-54EC-482F-94FF-54C32B1BC331}] => (Allow) D:\Steam\steamapps\common\Sail Forth\sail-forth.exe (Unity Technologies ApS) [Datei ist nicht signiert]
FirewallRules: [{02475407-FE5E-4F0E-A652-939164B69B6F}] => (Allow) D:\Steam\steamapps\common\Sail Forth\sail-forth.exe (Unity Technologies ApS) [Datei ist nicht signiert]
FirewallRules: [{8670F54F-CE4A-4919-A79B-9FC05B8DAEF3}] => (Allow) D:\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe () [Datei ist nicht signiert]
FirewallRules: [{B92EC773-F260-4DD5-9D97-5EFD9D713C9C}] => (Allow) D:\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe () [Datei ist nicht signiert]
FirewallRules: [{54897A83-F6D4-4A60-A87D-7389FA78237A}] => (Allow) D:\Steam\steamapps\common\Dungeons 3\Dungeons3.exe () [Datei ist nicht signiert]
FirewallRules: [{05C7583B-542C-4898-8709-AA2782F7DAA9}] => (Allow) D:\Steam\steamapps\common\Dungeons 3\Dungeons3.exe () [Datei ist nicht signiert]
FirewallRules: [{98F9F67C-EFD0-441A-9061-FAB34A061457}] => (Allow) D:\Steam\steamapps\common\Command and Conquer 3 Tiberium Wars\CNC3.exe (Electronic Arts Inc.) [Datei ist nicht signiert]
FirewallRules: [{6C535F85-6BD9-407D-A5A7-B5C1172AFBE1}] => (Allow) D:\Steam\steamapps\common\Command and Conquer 3 Tiberium Wars\CNC3.exe (Electronic Arts Inc.) [Datei ist nicht signiert]
FirewallRules: [{67471F17-D059-43D5-AAB0-2BDBEC820030}] => (Allow) D:\Steam\steamapps\common\CnCRemastered\ClientLauncherG.exe (Electronic Arts, Inc. -> Petroglyph Games Inc.)
FirewallRules: [{6BB1933C-12B3-46DF-813C-2B8726BAC623}] => (Allow) D:\Steam\steamapps\common\CnCRemastered\ClientLauncherG.exe (Electronic Arts, Inc. -> Petroglyph Games Inc.)
FirewallRules: [{BDC17255-92D8-4996-AB18-F5D9088C22D5}] => (Allow) D:\Steam\steamapps\common\City Car Driving\bin\win32\starter.exe (Forward Development) [Datei ist nicht signiert]
FirewallRules: [{A3848E34-CF2D-4801-B87E-CD3A1E68A498}] => (Allow) D:\Steam\steamapps\common\City Car Driving\bin\win32\starter.exe (Forward Development) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{E8FCCBCA-707A-4B30-8BA2-DC3E9C00FCC8}D:\steam\steamapps\common\dungeons 3\dungeons3bin.exe] => (Allow) D:\steam\steamapps\common\dungeons 3\dungeons3bin.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{282A2933-E029-40ED-8C24-3E54B6F53FBE}D:\steam\steamapps\common\dungeons 3\dungeons3bin.exe] => (Allow) D:\steam\steamapps\common\dungeons 3\dungeons3bin.exe () [Datei ist nicht signiert]
FirewallRules: [{FA417E6F-A222-4839-832A-A3DEBBE7C312}] => (Allow) D:\Steam\steamapps\common\Dungeons2\Dungeons2.exe () [Datei ist nicht signiert]
FirewallRules: [{AD969FDA-C212-4C9C-9BDE-37C6AD1FEA6F}] => (Allow) D:\Steam\steamapps\common\Dungeons2\Dungeons2.exe () [Datei ist nicht signiert]
FirewallRules: [{89EC74E2-C535-46F0-9B2B-FB9ADEC7980A}] => (Allow) D:\Steam\steamapps\common\Dungeons\DungeonsStarter.exe (Kalypso Media -> Realmforge Studios GmbH)
FirewallRules: [{B21F1637-7FDD-48C3-ADCB-31324911B3AA}] => (Allow) D:\Steam\steamapps\common\Dungeons\DungeonsStarter.exe (Kalypso Media -> Realmforge Studios GmbH)
FirewallRules: [{D9712D10-9C00-4623-9269-FB3BF95C91C5}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{FA7537B6-6710-4AFB-BDC0-CAD72651EDD7}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{62DCD3B3-FC3B-4C38-AA10-8BABE959808C}] => (Allow) D:\Steam\steamapps\common\Command and Conquer 3 - Kane's Wrath\CNC3EP1.exe (Electronic Arts Inc.) [Datei ist nicht signiert]
FirewallRules: [{9A496091-F412-4B41-B4FC-1617DB61397F}] => (Allow) D:\Steam\steamapps\common\Command and Conquer 3 - Kane's Wrath\CNC3EP1.exe (Electronic Arts Inc.) [Datei ist nicht signiert]
FirewallRules: [{F56F570A-A570-420F-87E5-8F85E2F0E19C}] => (Allow) D:\Steam\steamapps\common\Deep Rock Galactic\FSD.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{23C29CA3-4A65-4594-8828-68DF49E9CFA5}] => (Allow) D:\Steam\steamapps\common\Deep Rock Galactic\FSD.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{AB5604DF-96C9-463C-82A3-6CC15218ED22}] => (Allow) D:\Steam\steamapps\common\The Witcher Enhanced Edition\System\witcher.exe (CD Projekt Red) [Datei ist nicht signiert]
FirewallRules: [{191B73B0-8558-4DFB-A966-8F207E30B1F0}] => (Allow) D:\Steam\steamapps\common\The Witcher Enhanced Edition\System\witcher.exe (CD Projekt Red) [Datei ist nicht signiert]
FirewallRules: [{FA5A1763-9A93-48EE-9748-46AC459B1502}] => (Allow) D:\Steam\steamapps\common\The Witcher Enhanced Edition\System\djinni!.exe (CD Projekt RED Sp. z o.o. -> CD Projekt Red)
FirewallRules: [{2FC37E48-6E93-4DCD-9E11-04915CF22E06}] => (Allow) D:\Steam\steamapps\common\The Witcher Enhanced Edition\System\djinni!.exe (CD Projekt RED Sp. z o.o. -> CD Projekt Red)
FirewallRules: [{D00A5440-E950-4796-B980-A76918370A5D}] => (Allow) D:\Steam\steamapps\common\The Witcher Enhanced Edition\Digital Comic\DigitalComic.exe () [Datei ist nicht signiert]
FirewallRules: [{B9006374-7616-4DDD-AAFD-DF7FCD1A30DB}] => (Allow) D:\Steam\steamapps\common\The Witcher Enhanced Edition\Digital Comic\DigitalComic.exe () [Datei ist nicht signiert]
FirewallRules: [{B8377116-0E41-4C50-AD11-AAB17350A8A3}] => (Allow) D:\Steam\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe (Keen Software House s.r.o. -> Keen Software House)
FirewallRules: [{AD192513-BF49-4EC2-820C-89E5943138C2}] => (Allow) D:\Steam\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe (Keen Software House s.r.o. -> Keen Software House)
FirewallRules: [TCP Query User{ABF4B872-096A-465D-B2EE-FE511D4C3E0B}C:\users\korna\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\korna\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{F5E51325-230C-4E92-88C8-AA58F0A9D4A5}C:\users\korna\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\korna\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0A9E01AB-C7DA-411A-BB57-E29DA17F0127}] => (Allow) D:\Steam\steamapps\common\Derail Valley\DerailValley.exe () [Datei ist nicht signiert]
FirewallRules: [{8823FFE7-A1F0-477B-99D5-2774D38029B1}] => (Allow) D:\Steam\steamapps\common\Derail Valley\DerailValley.exe () [Datei ist nicht signiert]
FirewallRules: [{A11A988F-95B7-4371-A2F7-5A72F18A2FA9}] => (Allow) G:\SteamLibrary\steamapps\common\PC Building Simulator\PCBS.exe () [Datei ist nicht signiert]
FirewallRules: [{EF0C327A-F581-426A-BBBA-29FDA29B83FC}] => (Allow) G:\SteamLibrary\steamapps\common\PC Building Simulator\PCBS.exe () [Datei ist nicht signiert]
FirewallRules: [{BC24C91B-19A1-4973-9332-D93EB946E790}] => (Allow) D:\Steam\steamapps\common\Factorio\bin\x64\factorio.exe (Wube Software) [Datei ist nicht signiert]
FirewallRules: [{088B832E-C6B3-4A4C-9512-3960782BA0DC}] => (Allow) D:\Steam\steamapps\common\Factorio\bin\x64\factorio.exe (Wube Software) [Datei ist nicht signiert]
FirewallRules: [{AED59FBB-22BE-4DAC-A1D1-12871B1B0D89}] => (Allow) F:\SteamLibrary\steamapps\common\Cities_Skylines\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{A3210A62-8428-4103-BE9A-CCADCA0F3663}] => (Allow) F:\SteamLibrary\steamapps\common\Cities_Skylines\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{6BB83602-0291-4128-8E38-3BD46DDB4CA8}] => (Allow) F:\SteamLibrary\steamapps\common\VRising\VRising.exe (Stunlock Studios AB -> )
FirewallRules: [{63E5534F-C9C1-4A3F-B3CB-0FC4097E12B5}] => (Allow) F:\SteamLibrary\steamapps\common\VRising\VRising.exe (Stunlock Studios AB -> )
FirewallRules: [{77DB8EAA-951A-46B6-86FB-8F5DF8BE80D9}] => (Allow) F:\SteamLibrary\steamapps\common\Valheim\valheim.exe () [Datei ist nicht signiert]
FirewallRules: [{76E005D6-B093-4B2E-9D06-175ABEBE86A0}] => (Allow) F:\SteamLibrary\steamapps\common\Valheim\valheim.exe () [Datei ist nicht signiert]
FirewallRules: [{3A10BB82-8B55-4107-903D-7D6214EDC238}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{16E284DC-0A19-4A38-9B36-D98BE4ADAA07}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{DF6DF076-1977-4BB4-B2C9-8D0D91331C80}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{0E358485-CAA5-4B56-85BE-F423E5405608}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{59D3DC7F-0987-44B5-8EEE-5FBE35FBA004}] => (Block) C:\Program Files (x86)\Overwolf\0.218.0.8\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{340789E2-F07D-4629-9371-BBCA7320A8A5}] => (Block) C:\Program Files (x86)\Overwolf\0.218.0.8\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{4BF8C8F2-E2FF-40A1-B87C-41A63BD20914}] => (Allow) C:\Program Files (x86)\Overwolf\0.217.0.9\OverwolfBrowser.exe => Keine Datei
FirewallRules: [{F27CFC19-E227-464B-A92E-39106D11C25D}] => (Allow) C:\Program Files (x86)\Overwolf\0.217.0.9\OverwolfBrowser.exe => Keine Datei
FirewallRules: [{DCD66D5E-6343-4D57-813C-847E21EF1469}] => (Block) C:\Program Files (x86)\Overwolf\0.217.0.9\OverwolfBrowser.exe => Keine Datei
FirewallRules: [{C2510F35-A889-45C1-9778-F3FDEACABED0}] => (Block) C:\Program Files (x86)\Overwolf\0.217.0.9\OverwolfBrowser.exe => Keine Datei
FirewallRules: [{D5031518-6AD3-4CF9-A6AC-5D08F4FD3832}] => (Allow) C:\Program Files (x86)\Overwolf\0.218.0.8\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{90C7B3DB-C5B9-404E-9F21-301EDBBB03AE}] => (Allow) C:\Program Files (x86)\Overwolf\0.218.0.8\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{F6D34F97-F047-49FE-8D37-DC89FF005958}] => (Allow) G:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{EBB781EB-05F4-4CC4-9F4F-2F5A25A53305}] => (Allow) G:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{B5B8DBEE-357C-4B1B-B6C2-27D8F981B06C}] => (Allow) G:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{41A63EA4-8BE8-4CE5-A7F4-DEC3458342DB}] => (Allow) G:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{33336B16-FFA2-4F85-97C6-75733EB3E88D}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{C9CCD0E0-BFBD-4E0C-BFC7-29993DFC98CE}] => (Allow) F:\SteamLibrary\steamapps\common\ASTRONEER\Astro.exe (System Era Softworks) [Datei ist nicht signiert]
FirewallRules: [{CA08A15D-C3CD-485C-AAF1-C2AD953BCEB0}] => (Allow) F:\SteamLibrary\steamapps\common\ASTRONEER\Astro.exe (System Era Softworks) [Datei ist nicht signiert]
FirewallRules: [{E86E68D2-2576-4DC0-97A2-EC63EF7EF717}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{F100E36A-5F67-4CE1-9779-5189EA44BE01}C:\users\korna\appdata\local\discord\app-1.0.9010\discord.exe] => (Allow) C:\users\korna\appdata\local\discord\app-1.0.9010\discord.exe => Keine Datei
FirewallRules: [UDP Query User{46A67873-C921-4D23-8A6E-BEFAA5ED35BC}C:\users\korna\appdata\local\discord\app-1.0.9010\discord.exe] => (Allow) C:\users\korna\appdata\local\discord\app-1.0.9010\discord.exe => Keine Datei
FirewallRules: [{2F863903-F540-44DA-8AAF-3A999EE73A3F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3408.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{09B505F6-580F-4235-A5C2-73DCD438892E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3408.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{7AB4A9C7-32A7-49F6-B432-9D60E37C76D2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3408.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{4C136349-B9B1-49F4-8907-55372C9B63BF}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3408.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{7F5D8F45-E6DF-4483-A05B-35342711DFE4}] => (Allow) F:\SteamLibrary\steamapps\common\Slime Rancher\SlimeRancher.exe () [Datei ist nicht signiert]
FirewallRules: [{04633DA4-1065-4267-AC92-CF30587B1606}] => (Allow) F:\SteamLibrary\steamapps\common\Slime Rancher\SlimeRancher.exe () [Datei ist nicht signiert]
FirewallRules: [{349AD5BB-68CE-4194-9DCE-12A36E083388}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\110.0.1587.49\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Wiederherstellungspunkte =========================


==================== Fehlerhafte Geräte im Gerätemanager ============


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (02/19/2023 01:00:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 10.0.19041.2604, Zeitstempel: 0xa808a517
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.19041.2130, Zeitstempel: 0xb5ced1c6
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000ff6a9
ID des fehlerhaften Prozesses: 0x1780
Startzeit der fehlerhaften Anwendung: 0x01d94459cdcc4f37
Pfad der fehlerhaften Anwendung: C:\WINDOWS\Explorer.EXE
Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll
Berichtskennung: 09ac4125-f753-4aa1-bf97-84da3c831a35
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (02/15/2023 11:18:47 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.
.

Error: (02/15/2023 11:18:47 AM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.
]

Error: (02/15/2023 11:18:47 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.
.

Error: (02/15/2023 11:18:47 AM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.
]

Error: (02/15/2023 09:07:32 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 10.0.19041.2486, Zeitstempel: 0xf69ebb08
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.19041.2130, Zeitstempel: 0xb5ced1c6
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000ff6a9
ID des fehlerhaften Prozesses: 0x3de0
Startzeit der fehlerhaften Anwendung: 0x01d941148cfcbc65
Pfad der fehlerhaften Anwendung: C:\WINDOWS\Explorer.EXE
Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll
Berichtskennung: a4639d9d-4e1f-493d-9f08-01511eb15a15
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (02/14/2023 03:47:39 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Die Speicheroptimierung konnte erneut optimieren auf Daten (E:) nicht abschließen. Grund: Der angeforderte Vorgang wird von der Hardware des Volumes nicht unterstützt. (0x8900002A)

Error: (02/14/2023 03:47:31 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Die Speicheroptimierung konnte erneut optimieren auf Spiele (D:) nicht abschließen. Grund: Der angeforderte Vorgang wird von der Hardware des Volumes nicht unterstützt. (0x8900002A)


Systemfehler:
=============
Error: (02/19/2023 02:33:15 PM) (Source: Application Popup) (EventID: 56) (User: )
Description: ACPI5

Error: (02/19/2023 02:33:15 PM) (Source: Application Popup) (EventID: 56) (User: )
Description: ACPI1

Error: (02/19/2023 02:32:52 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst Windows Update konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (02/19/2023 02:32:26 PM) (Source: DCOM) (EventID: 10010) (User: KORNAHN)
Description: Der Server "{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (02/19/2023 02:32:26 PM) (Source: DCOM) (EventID: 10010) (User: KORNAHN)
Description: Der Server "Microsoft.AAD.BrokerPlugin_1000.19041.1023.0_neutral_neutral_cw5n1h2txyewy!Windows.Security.Authentication.Web.Core.BackgroundGetTokenTask.ClassId.WebAccountProvider" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (02/19/2023 01:08:39 PM) (Source: Application Popup) (EventID: 56) (User: )
Description: ACPI5

Error: (02/19/2023 01:08:39 PM) (Source: Application Popup) (EventID: 56) (User: )
Description: ACPI1

Error: (02/19/2023 01:08:46 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: Der Computer wurde nach einem schwerwiegenden Fehler neu gestartet. Der Fehlercode war: 0x00000133 (0x0000000000000001, 0x0000000000001e00, 0xfffff803156fa320, 0x0000000000000000). Ein volles Abbild wurde gespeichert in: C:\WINDOWS\Minidump\021923-7140-01.dmp. Berichts-ID: 59830a79-7534-4542-b9d2-66be84c69919.


CodeIntegrity:
===============
Date: 2023-02-19 14:36:52
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Common Files\G Data\AVKProxy\GDAMSIx64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Speicherinformationen ===========================

BIOS: American Megatrends Inc. P1.50 08/13/2015
Hauptplatine: ASRock Z170 Pro4
Prozessor: Intel(R) Core(TM) i5-6600 CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 40%
Installierter physikalischer RAM: 16256.64 MB
Verfügbarer physikalischer RAM: 9648.78 MB
Summe virtueller Speicher: 30080.64 MB
Verfügbarer virtueller Speicher: 21618.13 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:222.47 GB) (Free:26.7 GB) (Model: SPCC Solid State Disk) NTFS
Drive d: (Spiele) (Fixed) (Total:488.28 GB) (Free:14.59 GB) (Model: ST1000DM003-1SB10C) NTFS
Drive e: (Daten) (Fixed) (Total:443.1 GB) (Free:10.79 GB) (Model: ST1000DM003-1SB10C) NTFS
Drive f: (Steam) (Fixed) (Total:931.5 GB) (Free:60.35 GB) (Model: Samsung SSD 860 EVO 1TB) NTFS
Drive g: (FSX) (Fixed) (Total:232.76 GB) (Free:11.15 GB) (Model: Samsung SSD 850 EVO 250GB) NTFS
Drive i: () (Fixed) (Total:0.44 GB) (Free:0.42 GB) (Model: SPCC Solid State Disk) NTFS

\\?\Volume{270fa8da-25a5-43fd-8357-00e9d4acb181}\ () (Fixed) (Total:0.55 GB) (Free:0.08 GB) NTFS
\\?\Volume{cfc072af-8cd8-4ad3-b6ed-86b31950b8f0}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Protective MBR) (Size: 223.6 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 1 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 2 (Protective MBR) (Size: 232.9 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 3 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt =======================

M-K-D-B 20.02.2023 11:20
:hallo:



Mein Name ist Matthias und ich werde dir bei der Analyse und Bereinigung deines Systems helfen.



Aktive Malware kann ich in den Logdateien nicht erkennen, dafür jedoch Fehlermeldungen von Systemdateien, z. B. explorer.exe sowie eine veraltete Firmware-Version.



Daher empfehle ich dir eine saubere Neuinstallation von Windows 10.


Zitat:
BIOS: American Megatrends Inc. P1.50 08/13/2015
Hauptplatine: ASRock Z170 Pro4
Zudem solltest du zuvor ein Firmware Update durchführen... dein Stand ist von 2015.



Fazit:
1. Private Daten sichern.
2. Firmware/BIOS updaten.
3. Windows 10 Neuinstallation

cosinus 20.02.2023 12:23
Wenn es denn eine aktuellere Firmware gibt. Die CPU

Zitat:
Prozessor: Intel(R) Core(TM) i5-6600 CPU @ 3.30GHz
ist ja auch schon bereits 7 Jahre alt.

kornahn 20.02.2023 18:33
Hallo Matthias,

vielen Dank für die Prüfung des Logs und die hilfreichen Auskünfte. Ich werde wie von dir beschrieben vorgehen, sobald ich hier alles sichern konnte, bzw. mein Backup auf Aktualität geprüft habe.

VG und nochmals Danke!

M-K-D-B 20.02.2023 21:02
Gerne.

Für die Zeit nach der Neuinstallation noch ein kleiner Lesestoff.



Lesestoff:
Anleitung: Maßnahmen zur Absicherung des Rechners

M-K-D-B 20.02.2023 21:03
Wir sind froh, dass wir helfen konnten :abklatsch:

Dieses Thema scheint erledigt und wird aus unseren Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke uns bitte eine Erinnerung inklusive Link zum Thema.

Jeder andere bitte hier klicken und ein eigenes Thema erstellen.


Alle Zeitangaben in WEZ +1. Es ist jetzt 01:05 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131